PkgRadar

Go modules · proxy.golang.org

github.com/tiechui1994/tcpover

Go Generate Shell: //go:generate directive shells out to curl/wget/bash — runs during `go generate`.

Why PkgRadar flagged v0.0.5-0.20260603133204-9303f8a42eed

SeveritySignalEvidence
mediumGo Generate Shell//go:generate directive shells out to curl/wget/bash — runs during `go generate`. · github.com/tiechui1994/[email protected]/transport/anytls/skiplist/skiplist.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.5-0.20260603133204-9303f8a42eedReview152026-06-04
v0.0.5-0.20260603133139-c1705f5c1097Review152026-06-04
v0.0.5-0.20260602040820-335a043f2ecfReview152026-06-03
v0.0.5-0.20260602040803-4474e8da0917Review152026-06-03
v0.0.5-0.20260601152043-ca3cc5cd8e05Review152026-06-02
v0.0.5-0.20260601112226-f0c708dcdce2Review152026-06-02
v0.0.5-0.20260601112147-c23181739783Review152026-06-02
v0.0.5-0.20260601083914-0229b8ca6736Review152026-06-02
v0.0.5-0.20260601083849-a114833da4c7Review152026-06-02

Block this in CI

PkgRadar gates github.com/tiechui1994/tcpover (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/tiechui1994/[email protected]