PkgRadar

Go modules · proxy.golang.org

github.com/Abdullah4AI/apple-developer-toolkit

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged v1.260601.0

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/abdullah4ai/[email protected]/appstore/internal/cli/apps/community_wall.go
mediumRemote Payloadmatched "curl " · github.com/abdullah4ai/[email protected]/appstore/internal/cli/auth/auth.go
mediumRemote Payloadmatched "curl " · github.com/abdullah4ai/[email protected]/swiftship/internal/agentruntime/runtime.go
mediumRemote Payloadmatched "curl " · github.com/abdullah4ai/[email protected]/swiftship/internal/claude/validation.go
mediumRemote Payloadmatched "curl " · github.com/abdullah4ai/[email protected]/swiftship/internal/orchestration/pipeline_asc.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.260601.0High risk702026-06-03
v1.260531.1-0.20260531070532-03ef2103a7c4High risk702026-06-02
v1.260531.0High risk702026-06-02

Block this in CI

PkgRadar gates github.com/Abdullah4AI/apple-developer-toolkit (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/Abdullah4AI/[email protected]