PkgRadar

Go modules · proxy.golang.org

github.com/tingly-dev/tingly-box

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged v0.0.0-20260616093715-d1347bc6b420

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/tingly-dev/[email protected]/internal/data/provider_template.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/tingly-dev/[email protected]/internal/server/config/apply_config.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/tingly-dev/[email protected]/internal/server/guardrails_handler.go
mediumGo Mod Replace Localgo.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · github.com/tingly-dev/[email protected]/go.mod

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260616093715-d1347bc6b420High risk542026-06-17
v0.260611.3-0.20260616031402-93ed4b389364High risk542026-06-17
v0.0.0-20260616031402-93ed4b389364High risk542026-06-17
v0.0.0-20260616004402-87786d3370e1High risk542026-06-17
v0.260611.3-0.20260615161548-913bbcd94387High risk542026-06-16
v0.0.0-20260615161548-913bbcd94387High risk542026-06-16
v0.260611.3-0.20260615091158-2be464bd8ec8High risk542026-06-16
v0.0.0-20260615091158-2be464bd8ec8High risk542026-06-16
v0.260611.3-0.20260615034913-0fb1fe3f9ebeHigh risk542026-06-16
v0.0.0-20260615034913-0fb1fe3f9ebeHigh risk542026-06-16
v0.260611.3-0.20260613081612-44b581dd8728High risk542026-06-14
v0.0.0-20260613081612-44b581dd8728High risk542026-06-14
v0.0.0-20260611075539-f280cda2bd2aHigh risk542026-06-12
v0.0.0-20260611073542-66a9ad2a5018High risk542026-06-12
v0.260611.0-rc4High risk542026-06-12
v0.260611.0-rc5High risk542026-06-12
v0.0.0-20260610072944-ed0b82e5523aHigh risk542026-06-11
v0.260611.0-rc3.0.20260610063502-88ce4886d175High risk542026-06-11
v0.0.0-20260610063502-88ce4886d175High risk542026-06-11
v0.0.0-20260610054619-36acb513f92eHigh risk542026-06-11
v0.260611.0-rc2High risk542026-06-11
v0.0.0-20260610032225-1e1a2e4199f2High risk542026-06-11
v0.260611.0-rc3High risk542026-06-11
v0.0.0-20260610010025-3a0d92b29095High risk542026-06-11
v0.0.0-20260609100846-13adbf692d23High risk542026-06-10
v0.260611.0-rc2.0.20260609100846-13adbf692d23High risk542026-06-10
v0.260604.2-0.20260607064226-da88f2d4782eHigh risk542026-06-08
v0.0.0-20260607064226-da88f2d4782eHigh risk542026-06-08
v0.260604.2-0.20260605114447-ee01e2922553High risk542026-06-07
v0.0.0-20260605114447-ee01e2922553High risk542026-06-07
v0.260604.2-0.20260604101535-ebeac85e1b3bReview422026-06-05
v0.260604.2Review422026-06-05
v0.0.0-20260604031627-b894f0f751e3Review422026-06-05
v0.260604.1Review422026-06-05
v0.0.0-20260604024351-8ea7521e98e1Review422026-06-05
v0.2602020.1141-preview.0.20260604015708-d70792d1da95Review422026-06-05
v0.0.0-20260604005630-28ed696a0c32Review422026-06-05
v0.2602020.1141-preview.0.20260603162806-1e8b1e3562b2Review422026-06-04
v0.0.0-20260603162806-1e8b1e3562b2Review422026-06-04
v0.260604.0-rc4Review422026-06-04
v0.0.0-20260602145846-cb08b7137cdcReview422026-06-03
v0.2602020.1141-preview.0.20260602134200-82ecd439836bReview422026-06-03
v0.0.0-20260602131741-683ed3ff4815Review422026-06-03
v0.260604.0-rc3Review422026-06-03
v0.0.0-20260602115932-7617268e590bReview422026-06-03
v0.2602020.1141-preview.0.20260602110515-b506b0ebb0e0Review422026-06-03
v0.0.0-20260602110515-b506b0ebb0e0Review422026-06-03
v0.2602020.1141-preview.0.20260531133618-a030ff6e2f22Review422026-06-02
v0.260604.0-rc2Review422026-06-02
v0.2602020.1141-preview.0.20260530144035-c72887e1a2f3Review422026-05-31
v0.0.0-20260530144035-c72887e1a2f3Review422026-05-31
v0.0.0-20260528080313-2feab7919648Review422026-05-30
v0.0.0-20260528073224-9a2f94cbedd4Review422026-05-30
v0.2602020.1141-preview.0.20260528073224-9a2f94cbedd4Review422026-05-30
v0.0.0-20260528073115-380946d8c529Review422026-05-30
v0.2602020.1141-preview.0.20260528053530-a4a11c6988e3Review422026-05-30
v0.0.0-20260528053530-a4a11c6988e3Review422026-05-30
v0.260604.0-rc1Review422026-05-29

Block this in CI

PkgRadar gates github.com/tingly-dev/tingly-box (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/tingly-dev/[email protected]