PkgRadar

Go modules · proxy.golang.org

github.com/stacklok/apiary

Remote Payload: matched "github.com/stacklok/go-microvm/releases/download"

Why PkgRadar flagged v0.0.20

SeveritySignalEvidence
mediumRemote Payloadmatched "github.com/stacklok/go-microvm/releases/download" · github.com/stacklok/[email protected]/internal/infra/vm/firmware.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.20Review172026-06-20
v0.0.1Review172026-06-20
v0.0.5Review172026-06-20
v0.0.10Review172026-06-20
v0.0.3Review172026-06-20
v0.0.12Review172026-06-20
v0.0.4Review172026-06-20
v0.0.16Review172026-06-20
v0.0.14Review172026-06-20
v0.0.2Review172026-06-20
v0.0.13Review172026-06-20
v0.0.15Review172026-06-20
v0.0.19Review172026-06-20
v0.0.21Review172026-06-20
v0.0.8Review172026-06-20
v0.0.17Review172026-06-20
v0.0.6Review172026-06-20
v0.0.9Review172026-06-20
v0.0.7Review172026-06-20
v0.0.18Review172026-06-20
v0.0.23-0.20260612084934-4f24a4d0ba9dReview172026-06-20
v0.0.11Review172026-06-20
v0.0.22Review172026-06-20

Block this in CI

PkgRadar gates github.com/stacklok/apiary (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/stacklok/[email protected]
Start free — 25 scans / moView full evidence