PkgRadar

Go modules · proxy.golang.org

github.com/realmopensource/wings

Credential file access: matched "id_rsa"

Why PkgRadar flagged v1.1.2

SeveritySignalEvidence
mediumCredential file accessmatched "id_rsa" · github.com/realmopensource/[email protected]/sftp/server.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.11.0-rc.1Low risk02026-05-31
v1.1.2Review102026-05-31
v1.7.0Low risk02026-05-31
v1.7.3Low risk02026-05-31
v1.6.1Low risk02026-05-31
v1.2.2Review102026-05-31
v1.0.0-rc.1Low risk02026-05-31
v1.4.6Review102026-05-31
v1.4.0Review102026-05-31
v1.4.4Review102026-05-31
v1.11.3Low risk02026-05-31
v1.11.4Low risk02026-05-31
v1.5.1Review102026-05-31
v1.4.7Review102026-05-31
v1.0.1Review102026-05-31
v1.5.2Low risk02026-05-31
v1.5.6Low risk02026-05-31
v1.6.3Low risk02026-05-31
v1.12.2Low risk02026-05-31
v1.5.0Review102026-05-31
v1.3.1Review102026-05-31
v1.5.5Low risk02026-05-31
v1.0.0-rc.6Review102026-05-31
v1.11.11Low risk02026-05-31
v1.0.0Review102026-05-31
v1.0.0-beta.4Low risk02026-05-31
v1.6.4Low risk02026-05-31
v1.12.1Low risk02026-05-31
v1.3.0Review102026-05-31
v1.0.0-beta.1Low risk02026-05-31
v1.11.1Low risk02026-05-31
v1.11.8Low risk02026-05-31
v1.1.3Review102026-05-31
v1.2.1Review102026-05-31
v1.4.1Review102026-05-31
v1.0.0-alpha.2Low risk02026-05-31
v1.0.0-beta.8Low risk02026-05-31
v1.0.0-rc.7Review102026-05-31
v1.11.12Low risk02026-05-31
v1.0.0-rc.2Low risk02026-05-31
v1.11.13Low risk02026-05-31
v1.11.6Low risk02026-05-31
v1.2.0Review102026-05-31
v1.11.0Low risk02026-05-31
v1.0.0-beta.6Low risk02026-05-31
v1.6.0Low risk02026-05-31
v1.0.0-beta.7Low risk02026-05-31
v1.11.2Low risk02026-05-31
v1.11.10Low risk02026-05-31
v1.0.0-rc.3Review102026-05-31
v1.5.3Low risk02026-05-31
v1.7.2Low risk02026-05-31
v1.7.1Low risk02026-05-31
v1.4.3Review102026-05-31
v1.1.0Review102026-05-31
v1.12.0Low risk02026-05-31
v1.4.5Review102026-05-31
v1.1.1Review102026-05-31
v1.2.3Review102026-05-31
v1.11.5Low risk02026-05-31
v1.11.9Low risk02026-05-31
v1.11.7Low risk02026-05-31
v1.7.5Low risk02026-05-31
v1.0.0-rc.5Review102026-05-31
v1.6.2Low risk02026-05-31
v1.5.4Low risk02026-05-31
v1.11.0-rc.2Low risk02026-05-31
v1.3.2Review102026-05-31
v1.0.0-beta.2Low risk02026-05-31
v1.0.0-alpha.1Low risk02026-05-31
v1.0.0-beta.3Low risk02026-05-31
v1.0.0-rc.4Review102026-05-31
v1.0.0-beta.9Low risk02026-05-31
v1.7.4Low risk02026-05-31
v1.0.0-beta.5Low risk02026-05-31
v1.4.2Review102026-05-31
v1.12.3Low risk02026-05-31

Block this in CI

PkgRadar gates github.com/realmopensource/wings (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/realmopensource/[email protected]
Start free — 25 scans / moView full evidence