Go modules · proxy.golang.org

gitee.com/leijmdas/gowebframe/gocfg

Remote Payload: matched "CUrl "

Why PkgRadar flagged v0.0.0-20250422132504-daae2d3bd29c

Severity	Signal	Evidence
medium	Remote Payload	matched "CUrl " · gitee.com/leijmdas/gowebframe/[email protected]/ichubcfg/goconfig2/basic/common2/app.go
medium	Remote Payload	matched "curl " · gitee.com/leijmdas/gowebframe/[email protected]/ichubcfg/goconfig2/conf/micro_config.go

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20250422132504-daae2d3bd29c`	Review	24	2026-06-09
`v0.0.0-20250422133318-5d87cd59357d`	Review	24	2026-06-09

Block this in CI

PkgRadar gates gitee.com/leijmdas/gowebframe/gocfg (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go gitee.com/leijmdas/gowebframe/[email protected]