Go modules · proxy.golang.org

github.com/seanly/dmr-devkit

Remote Payload, Credential file access

Why PkgRadar flagged v0.0.0-20260710030524-9a7ee6aadad3

Severity	Signal	Evidence
medium	Remote Payload	—
medium	Remote Payload	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260710030524-9a7ee6aadad3`	Review	29	2026-07-11
`v0.0.0-20260708135007-24a4311ec9b2`	Review	29	2026-07-09
`v0.0.0-20260707094635-9602bf089323`	Review	29	2026-07-08
`v0.0.0-20260707022350-0c9203f77b25`	Review	29	2026-07-08
`v0.0.0-20260705150448-f5b686f05c2e`	Review	29	2026-07-06
`v0.0.0-20260705142336-9f20997f6948`	Review	29	2026-07-06
`v0.0.0-20260705140810-9c6b670fad1d`	Review	29	2026-07-06
`v0.0.0-20260705132901-2b5c27566b25`	Review	29	2026-07-06
`v0.0.0-20260705020143-1d148c660d71`	Review	29	2026-07-05
`v0.0.0-20260704054004-8e90b5145188`	Review	29	2026-07-05
`v0.0.0-20260703015304-d63eb0d2ede5`	Review	29	2026-07-04
`v0.0.0-20260702153821-32a16e9b9175`	Review	29	2026-07-03

Block this in CI

PkgRadar gates github.com/seanly/dmr-devkit (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/seanly/[email protected]