Go modules · proxy.golang.org
github.com/Curling-AI/picoclaw
Shipped Live Secret, Tls Verification Disabled, Remote Payload +1 more
Why PkgRadar flagged v0.0.0-20260628053434-317f0903e7ee
| Severity | Signal | Evidence |
|---|---|---|
| high | Shipped Live Secret | — |
| medium | Tls Verification Disabled | — |
| medium | Remote Payload | — |
| medium | Remote Payload | — |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v0.0.0-20260628053434-317f0903e7ee | High risk | 81 | 2026-06-29 |
Block this in CI
pkgradar gate --ecosystem go github.com/Curling-AI/[email protected]