PkgRadar

Go modules · proxy.golang.org

skia.googlesource.com/buildbot.git

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged v0.0.0-20260612104222-375a65826e10

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · skia.googlesource.com/[email protected]/go/github/github.go
mediumRemote Payloadmatched "cURL " · skia.googlesource.com/[email protected]/npm-audit-mirror/go/mirrors/mirror.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260612104222-375a65826e10Review432026-06-13
v0.0.0-20260612042132-b0f5f3b64f6dReview432026-06-13
v0.0.0-20260611055921-5b130e42d88bReview432026-06-12
v0.0.0-20260611041734-b2f7766962baReview432026-06-12
v0.0.0-20260610201458-6f4bd209e70aReview432026-06-12
v0.0.0-20260610165207-9ddb38b53967Review432026-06-11
v0.0.0-20260610052408-372fab4922b7Review432026-06-11
v0.0.0-20260610043825-0c3727d7c08cReview432026-06-11
v0.0.0-20260609120939-3e20382350a5Review432026-06-10
v0.0.0-20260609092822-315932f2fd6dReview432026-06-10
v0.0.0-20260609081618-61a31636f149Review432026-06-10
v0.0.0-20260609091124-ff38a3179956Review432026-06-10
v0.0.0-20260609090551-25660fbc0d5fReview432026-06-10
v0.0.0-20260609060149-40559304e2caReview432026-06-10
v0.0.0-20260609072655-07a7d51f6373Review432026-06-10
v0.0.0-20260604043428-c5e69c21a0adReview432026-06-05
v0.0.0-20260604041707-204baeba9ddeReview432026-06-05
v0.0.0-20260603195638-aa3b5a254aa6Review432026-06-05
v0.0.0-20260601121359-8c932cc90ffdReview432026-06-02
v0.0.0-20260601084532-db5187114c75Review432026-06-02
v0.0.0-20260601055928-ba1f41b71227Review432026-06-02
v0.0.0-20260527202737-5c22c771f011Review432026-05-30
v0.0.0-20260529060140-2da962880dc7Review432026-05-30

Block this in CI

PkgRadar gates skia.googlesource.com/buildbot.git (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go skia.googlesource.com/[email protected]
Start free — 25 scans / moView full evidence