PkgRadar

Go modules · proxy.golang.org

github.com/Artexis10/endstate/go-engine

Remote Payload: matched "curl "

Why PkgRadar flagged v0.0.0-20260612010736-f22cd32ce8af

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/artexis10/endstate/[email protected]/internal/bootstrap/bootstrap.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260612010736-f22cd32ce8afReview172026-06-14
v0.0.0-20260607145925-7e73025a8ad4Review172026-06-08
v0.0.0-20260604190921-0dba0834f90aReview52026-06-06
v0.0.0-20260602181432-cac814e16aa1Review52026-06-03
v0.0.0-20260530233606-e6cc5cb0852eReview52026-06-01
v0.0.0-20260526225529-1a443125b047Review52026-05-29

Block this in CI

PkgRadar gates github.com/Artexis10/endstate/go-engine (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/Artexis10/endstate/[email protected]