Go modules · proxy.golang.org

codeberg.org/jersey/lightning

Remote Payload: matched "curl "

Why PkgRadar flagged v0.8.10-0.20260605140619-f7d210836d1c

Severity	Signal	Evidence
medium	Remote Payload	matched "curl " · codeberg.org/jersey/[email protected]/pkg/platforms/matrix/outgoing.go

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.8.10-0.20260605140619-f7d210836d1c`	Review	12	2026-06-06
`v0.8.10-0.20260604174736-03c599147ab1`	Review	12	2026-06-05
`v0.8.10-0.20260603212155-da2bca4e859b`	Review	12	2026-06-04
`v0.8.10-0.20260601152623-7dccf45ad51e`	Review	12	2026-06-02
`v0.8.10-0.20260601151943-926338538b11`	Review	12	2026-06-02
`v0.8.10-0.20260601010234-98d76ba7e740`	Review	12	2026-06-02
`v0.8.10-0.20260529150712-602f7f81970f`	Review	12	2026-05-30

Block this in CI

PkgRadar gates codeberg.org/jersey/lightning (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go codeberg.org/jersey/[email protected]