Local reference
Suspicious dependency
Inferred
Mal-ecule
K(Li)H₅(Cm₃Db₂F₃Os₂Po)Md₂(BkPa₂)
Referenced by 4 samples
Well-known
notable severity, 99% confident.
lib/cloud
OpenTelemetry OTLP gRPC exporter module
baseline severity, 92% confident.
tool/detection
Secret-scanner rule named for a credential kind
Micro-behaviors
notable severity, 90% confident.
communications/http/header
Native HTTP JSON content type
notable severity, 90% confident.
communications/http/url
Go reads an HTTP response body
notable severity, 90% confident.
communications/url
Parses a URL with net/url
notable severity, 85% confident.
data/serialize
Go JSON marshal call
notable severity, 80% confident.
data/source/dynamic
Repeated Go reflection API usage
notable severity, 90% confident.
fs/directory
Creates a directory tree with Go os.MkdirAll
notable severity, 90% confident.
fs/file
os.OpenFile creates a new file
notable severity, 90% confident.
fs/file/write
Go writes data with os.WriteFile
notable severity, 85% confident.
os/container
Kubernetes Go runtime integration
notable severity, 90% confident.
os/random/prng
Go math/rand integer generation call
notable severity, 95% confident.
process/create
Creates a child process with Go exec.Command
baseline severity, 75% confident.
communications/ip
Source references the localhost hostname
Metadata
notable severity, 97% confident.
build
Go generated-code header comment
notable severity, 99% confident.
package
Go module source archive layout
notable severity, 98% confident.
package/testing/presence
Archive lists a test-tree member
baseline severity, 80% confident.
file/profile
English function-word token "that"
baseline severity, 80% confident.
package/testing/harness
Go test function name
component severity, 85% confident.
lang
Generated source warning text
20 of 21 traits shown
Identity
| SHA-256 | a078ba486776b5135a1da35455746ec079c3d1120fa499fd8eafc984c102495b |
|---|---|
| Canonical SHA-256 | 013334a7a10755eb6f67ccb9f60b2ebd1f2200864403f77ef23a8fc20c8ccdca |
| Filename | v0.28.8.zip |
| Package | k8s.io/component-base |
| Version | v0.28.8 |
| PURL | pkg:golang/k8s.io/[email protected] |
Origin
| Source | upload |
|---|---|
| Ecosystem | golang |
| Domain | golang.org |
| URL | https://proxy.golang.org/k8s.io/component-base/@v/v0.28.8.zip |
Timeline
| First seen | 28 Aug 2026 22:41 UTC |
|---|---|
| First analyzed | 28 Aug 2026 22:42 UTC |
| Last analyzed | 29 Aug 2026 00:19 UTC |
| Last updated | 29 Aug 2026 00:19 UTC |
Labeling
| Label | unknown |
|---|---|
| Label source | upload |
| Traits version | b59b7 |
Not seeing what you expected? Let us know