PkgRadar

Go modules · proxy.golang.org

github.com/514-labs/moosestack

Remote Payload: matched "curl "

Why PkgRadar flagged v0.6.532-ci-1-ga57ac1a48

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/514-labs/[email protected]/apps/framework-cli/deploy/senddata.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.6.532-ci-1-ga57ac1a48Review212026-05-29
v0.6.532-ci-1-ge4cda932dReview212026-05-29
v0.6.532-ci-2-g01750c75aReview212026-05-29
v0.6.532-ci-3-g3055e28beReview212026-05-29
v0.6.532-ci-4-gc722d970bReview212026-05-29
v0.6.532-ci-5-g4afc45941Review212026-05-29
v0.6.533Review212026-05-29
v0.6.533-ci-2-g067c603bcReview212026-05-29

Block this in CI

PkgRadar gates github.com/514-labs/moosestack (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/514-labs/[email protected]