PkgRadar

Go modules · proxy.golang.org

ctoup.com/coreapp

Remote Payload: matched "cURL "

Why PkgRadar flagged v0.2.6

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · ctoup.com/[email protected]/pkg/core/api/recovery_handler.go
mediumRemote Payloadmatched "cURL " · ctoup.com/[email protected]/pkg/shared/auth/kratos/provider.go
mediumCredential file accessmatched "GOOGLE_APPLICATION_CREDENTIALS" · ctoup.com/[email protected]/pkg/shared/fileservice/file_service.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.2.6Review342026-06-10
v0.2.3Review342026-05-30

Block this in CI

PkgRadar gates ctoup.com/coreapp (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go ctoup.com/[email protected]
ctoup.com/coreapp — Go modules security scan | PkgRadar