PkgRadar

Go modules · proxy.golang.org

github.com/trakhimenok/gotreesitter

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged v0.13.0

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/trakhimenok/[email protected]/cmd/gen_linguist/main.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.13.0Review152026-06-12
v0.15.1Review152026-06-12
v0.9.1Review152026-06-12
v0.13.3Review152026-06-12
v0.11.2Review152026-06-12
v0.10.1Review152026-06-12
v0.20.0-rc1Review152026-06-12
v0.20.0-rc2Review152026-06-12
v0.19.1Review152026-06-12
v0.18.0Review152026-06-12
v0.20.0Review152026-06-12
v0.7.4Review152026-06-12
v0.10.0Review152026-06-12
v0.6.0Low risk02026-06-12
v0.20.1Review152026-06-12
v0.8.0Review152026-06-12
v0.3.0Low risk02026-06-12
v0.5.2Low risk02026-06-12
v0.7.0Review152026-06-12
v0.15.0Review152026-06-12
v0.20.2Review152026-06-12
v0.12.1Review152026-06-12
v0.20.3-0.20260611095614-14527fe8bf96Review152026-06-12

Block this in CI

PkgRadar gates github.com/trakhimenok/gotreesitter (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/trakhimenok/[email protected]
Start free — 25 scans / moView full evidence