PkgRadar

Go modules · proxy.golang.org

github.com/sholdee/drydock

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged v0.1.20

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/sholdee/[email protected]/internal/pluginonboarding/types.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.1.20Review122026-06-12
v0.1.18Low risk02026-06-09
v0.1.16Low risk02026-06-08
v0.1.18-0.20260606223241-a80fe18f7e72Low risk02026-06-08
v0.1.17Low risk02026-06-08
v0.1.11Low risk02026-06-03

Block this in CI

PkgRadar gates github.com/sholdee/drydock (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/sholdee/[email protected]
Start free — 25 scans / moView full evidence