PkgRadar

Go modules · proxy.golang.org

github.com/tinywasm/json

Go Mod Replace Local

Why PkgRadar flagged v0.5.11

SeveritySignalEvidence
mediumGo Mod Replace Local

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.5.11Review102026-07-13
v0.5.9Low risk02026-07-09
v0.5.7Low risk02026-07-09
v0.5.10Low risk02026-07-09
v0.5.8Low risk02026-07-07
v0.5.6Low risk02026-06-28
v0.5.5Low risk02026-06-26

Block this in CI

PkgRadar gates github.com/tinywasm/json (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/tinywasm/[email protected]
github.com/tinywasm/json — Go modules security scan | PkgRadar