Go modules · proxy.golang.org

github.com/Apple/foundationdb

Remote Payload: matched "curl "

Why PkgRadar flagged v0.0.0-20260528035756-c909b59013fe

Severity	Signal	Evidence
medium	Remote Payload	matched "curl " · github.com/apple/[email protected]/fdbclient/tests/aws_fixture.sh
medium	Remote Payload	matched "curl " · github.com/apple/[email protected]/packaging/docker/build-images.sh

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260602204632-8f6feacf084c`	Low risk	0	2026-06-04
`v0.0.0-20260602024758-969280fe1734`	Low risk	0	2026-06-03
`v0.0.0-20260530191345-88a04b2eb5e9`	Low risk	0	2026-06-01
`v0.0.0-20260529195930-bab63fde78aa`	Low risk	0	2026-05-30
`v0.0.0-20260528035756-c909b59013fe`	Review	24	2026-05-29
`v0.0.0-20260527223748-e5276f5daba0`	Review	24	2026-05-29

Block this in CI

PkgRadar gates github.com/Apple/foundationdb (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/Apple/[email protected]