PkgRadar

Go modules · proxy.golang.org

go.datum.net/network-services-operator

Remote Payload: matched "github.com/jetstack/cert-manager/releases/download"

Why PkgRadar flagged v0.21.10-0.20260526221005-b5747a3dc5c8

SeveritySignalEvidence
mediumRemote Payloadmatched "github.com/jetstack/cert-manager/releases/download" · go.datum.net/[email protected]/test/utils/utils.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.21.10-0.20260615181148-0e0fbc8ace31Low risk02026-06-16
v0.21.10-0.20260610121849-6b87e21a8ab3Low risk02026-06-11
v0.21.10-0.20260529005919-5f799d93f256Low risk02026-06-02
v0.21.10-0.20260526221005-b5747a3dc5c8Review392026-05-29
v0.21.10-0.20260528021428-b0f2347f5359Review392026-05-29

Block this in CI

PkgRadar gates go.datum.net/network-services-operator (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go go.datum.net/[email protected]