PkgRadar

Go modules · proxy.golang.org

github.com/thomsonreuters/gate

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged v1.0.5-0.20260604101138-e041cde39ba9

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/thomsonreuters/[email protected]/internal/config/policy.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.0.5-0.20260604101138-e041cde39ba9Review152026-06-06
v1.0.0Review152026-06-06
v1.0.3Review152026-06-06
v1.0.1Review152026-06-06
v1.0.2Review152026-06-06
v1.0.4Review152026-06-06

Block this in CI

PkgRadar gates github.com/thomsonreuters/gate (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/thomsonreuters/[email protected]