PkgRadar

Go modules · proxy.golang.org

bitbucket.org/itotcca/tx-rails/aggd

Remote Payload: matched "CURL "

Why PkgRadar flagged v0.0.0-20260531011905-8e5cf6178a68

SeveritySignalEvidence
mediumRemote Payloadmatched "CURL " · bitbucket.org/itotcca/tx-rails/[email protected]/cmd/aggd-abci/main.go
mediumGo Mod Replace Localgo.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · bitbucket.org/itotcca/tx-rails/[email protected]/go.mod

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260531011905-8e5cf6178a68Review222026-06-02

Block this in CI

PkgRadar gates bitbucket.org/itotcca/tx-rails/aggd (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go bitbucket.org/itotcca/tx-rails/[email protected]