PkgRadar

Go modules · proxy.golang.org

github.com/stergiotis/boxer

Go Generate Shell: //go:generate directive shells out to curl/wget/bash — runs during `go generate`.

Why PkgRadar flagged v0.0.0-20260609212106-516c318757a7

SeveritySignalEvidence
mediumGo Generate Shell//go:generate directive shells out to curl/wget/bash — runs during `go generate`. · github.com/stergiotis/[email protected]/public/config/env/doc_gen.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260609212106-516c318757a7Review152026-06-11
v0.0.0-20260608213924-486e6a773f8dReview152026-06-10
v0.0.0-20260607220751-5b18a13f2486Review152026-06-09
v0.0.0-20260606222849-0ea8731b4ad1Review152026-06-08
v0.0.0-20260605221956-72b868455d4dReview152026-06-07
v0.0.0-20260603135636-93371971929aReview152026-06-04
v0.0.0-20260601213704-5c0f6ffabf6cReview152026-06-03
v0.0.0-20260531204944-4211d2ad6d0fReview152026-06-02
v0.0.0-20260531072532-5eb0bf30a8ecReview152026-06-01
v0.0.0-20260529140351-8ff0e37eb20dReview152026-05-30
v0.0.0-20260529063155-11e0289d10bcReview152026-05-30
v0.0.0-20260529062646-6ecffc529c64Review152026-05-30
v0.0.0-20260527220724-3fb209421359Review302026-05-29

Block this in CI

PkgRadar gates github.com/stergiotis/boxer (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/stergiotis/[email protected]
Start free — 25 scans / moView full evidence