PkgRadar

Go modules · proxy.golang.org

github.com/srz-zumix/go-gh-extension

Remote Payload: matched "api.github.com/graphql"

Why PkgRadar flagged v0.5.0

SeveritySignalEvidence
mediumRemote Payloadmatched "api.github.com/graphql" · github.com/srz-zumix/[email protected]/pkg/gh/client/defaults.go
mediumRemote Payloadmatched "cURL " · github.com/srz-zumix/[email protected]/pkg/gh/gist.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.5.0Review242026-06-10
v0.4.45-0.20260607144253-c0f6fbaa5143Review242026-06-08
v0.4.44Review242026-06-07
v0.4.42Review242026-06-02
v0.4.41Review242026-06-01
v0.4.40Review242026-05-31

Block this in CI

PkgRadar gates github.com/srz-zumix/go-gh-extension (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/srz-zumix/[email protected]