PkgRadar

Go modules · proxy.golang.org

github.com/zoharbabin/web-researcher-mcp

Go Generate Shell: //go:generate directive shells out to curl/wget/bash — runs during `go generate`.

Why PkgRadar flagged v1.26.1

SeveritySignalEvidence
mediumGo Generate Shell//go:generate directive shells out to curl/wget/bash — runs during `go generate`. · github.com/zoharbabin/[email protected]/internal/search/lenses_embed.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.26.1Review152026-06-11
v1.26.0Review152026-06-11
v1.25.1Review152026-06-11
v1.24.0Low risk02026-06-10
v1.23.0Low risk02026-06-10
v1.22.0Low risk02026-06-09
v1.21.0Low risk02026-06-09
v1.20.2Low risk02026-06-08
v1.20.1Low risk02026-06-08
v1.20.0Low risk02026-06-08
v1.19.0Low risk02026-06-07
v1.18.0Low risk02026-06-07
v1.17.0Low risk02026-06-06
v1.16.2Low risk02026-06-05
v1.16.1Low risk02026-06-05
v1.16.0Low risk02026-06-04
v1.15.1Low risk02026-06-04
v1.15.0Low risk02026-06-03
v1.13.0Low risk02026-06-02
v1.12.0Low risk02026-06-01
v1.11.0Low risk02026-05-31
v1.10.1Low risk02026-05-30

Block this in CI

PkgRadar gates github.com/zoharbabin/web-researcher-mcp (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/zoharbabin/[email protected]