PkgRadar

Go modules · proxy.golang.org

filippo.io/age

Remote Payload: matched "curl "

Why PkgRadar flagged v0.0.0-20251231151937-0293aca1d732

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · filippo.io/[email protected]/cmd/age/age.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20251231151937-0293aca1d732Review122026-06-15
v1.0.1-0.20220524135622-349ed5ed3fceReview122026-06-15
v1.1.0-rc.1.0.20220703104848-e84d74239e91Review122026-06-13
v1.0.1-0.20220524135622-fbe51d501ca6Review122026-06-12
v1.0.1-0.20220522095438-765400f0c154Review122026-06-12
v1.1.0-rc.1.0.20220712202651-e41463e1171bReview122026-06-11
v1.1.0-rc.1.0.20220703104848-0ab5c738fbcfReview122026-06-11
v1.1.0-rc.1.0.20220712202651-8a02f4801fc9Review122026-06-11
v1.1.0-rc.1.0.20220703104848-331b242a9c9dReview122026-06-07
v1.1.0-rc.1.0.20220615165307-e49b1f9afe9eReview122026-05-29

Block this in CI

PkgRadar gates filippo.io/age (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go filippo.io/[email protected]