PkgRadar

Go modules · proxy.golang.org

go.flipt.io/flipt

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged v1.30.2-0.20231111085044-5724930c82d7

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · go.flipt.io/[email protected]/cmd/flipt/config.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.30.2-0.20231111085044-5724930c82d7Review122026-06-17
v1.61.2-0.20260616065342-d9da9d210f85Review122026-06-17
v0.0.0-20250117211545-45d9f3ec97beReview122026-06-16
v0.0.0-20250110184850-41eda138af35Review122026-06-16
v0.0.0-20250101165158-3d8a6aaa9cffReview122026-06-16
v0.0.0-20241215205914-45252bc782b8Review122026-06-16
v1.61.2-0.20260613062216-dc73e44b4514Review122026-06-15
v1.54.3-0.20260613101423-3d9076e39f76Review242026-06-15
v1.54.3-0.20260612235747-ead29a1b4edaReview242026-06-14
v1.61.2-0.20260612080830-e9e0176e74fbReview122026-06-13
v1.54.3-0.20260608181651-f5bf5e9a38b5Review242026-06-09
v1.61.2-0.20260606071840-3da1f96bd1aeReview122026-06-08
v1.11.1-0.20220915130834-21a935ad7886Low risk02026-06-06
v1.11.1-0.20220914164608-4e1cd36398eeLow risk02026-06-06
v1.54.3-0.20260603214839-dba660d8baa2Review242026-06-06
v1.54.1-0.20260604080058-3eb6b3692a25Review122026-06-05
v0.13.1-0.20260604080058-3eb6b3692a25Review122026-06-05
v1.29.2-0.20231109181612-b22f5f02e40bReview122026-06-05
v1.61.2-0.20260604080058-3eb6b3692a25Review122026-06-05
v1.61.2-0.20260603051626-7797adafb541Review122026-06-04
v0.13.1-0.20260530103329-949f798c08efReview122026-06-02
v1.54.1-0.20260530103329-949f798c08efReview122026-06-01
v1.49.3-0.20241121174313-1f6255dda664Review122026-06-01
v1.61.2-0.20260530103329-949f798c08efReview122026-05-31
v1.54.3-0.20260528232729-a67ffbe1dc41Review242026-05-30
v1.61.2-0.20260528061026-a130436ecc08Review122026-05-29
v1.61.2-0.20260528002009-e143baf71586Review222026-05-29

Block this in CI

PkgRadar gates go.flipt.io/flipt (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go go.flipt.io/[email protected]