PkgRadar

Go modules · proxy.golang.org

github.com/vllm-project/semantic-router/e2e

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged v0.0.0-20260605173835-88b9e1f24cd8

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/vllm-project/semantic-router/[email protected]/pkg/helm/deployer.go
mediumRemote Payloadmatched "github.com/kubernetes-sigs/gateway-api/releases/download" · github.com/vllm-project/semantic-router/[email protected]/profiles/agentgateway/runtime.go
mediumRemote Payloadmatched "github.com/vllm-project/aibrix/releases/download" · github.com/vllm-project/semantic-router/[email protected]/profiles/aibrix/profile.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/vllm-project/semantic-router/[email protected]/profiles/authz-rbac/profile.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/vllm-project/semantic-router/[email protected]/profiles/dynamic-config/profile.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/vllm-project/semantic-router/[email protected]/profiles/istio/runtime.go
mediumRemote Payloadmatched "github.com/kubernetes-sigs/gateway-api/releases/download" · github.com/vllm-project/semantic-router/[email protected]/profiles/llm-d/profile.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/vllm-project/semantic-router/[email protected]/profiles/ml-model-selection/profile.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/vllm-project/semantic-router/[email protected]/profiles/multimodal-routing/profile.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260605173835-88b9e1f24cd8High risk862026-06-07
v0.0.0-20260602133222-a0694610a595High risk862026-06-03
v0.0.0-20260530114956-75adc34cbdecHigh risk862026-05-31
v0.0.0-20260530110639-f82cbca2003cHigh risk862026-05-31
v0.0.0-20260530080553-be2f4887b728High risk862026-05-31

Block this in CI

PkgRadar gates github.com/vllm-project/semantic-router/e2e (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/vllm-project/semantic-router/[email protected]