PkgRadar

Go modules · proxy.golang.org

github.com/DaanV2/mechanus/server

Remote Payload: matched "curl\n\t"

Why PkgRadar flagged v0.0.0-20260607100948-3db9cf7a497e

SeveritySignalEvidence
mediumRemote Payloadmatched "curl\n\t" · github.com/daanv2/mechanus/[email protected]/go.mod
mediumRemote Payloadmatched "curl " · github.com/daanv2/mechanus/[email protected]/go.sum

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260607100948-3db9cf7a497eReview242026-06-09
v0.0.0-20260531172115-df5d57bf14b1Review242026-06-02
v0.0.0-20260529131654-ff81f3eef238Review242026-05-30
v0.0.0-20260529121314-191f68e8123bReview242026-05-30
v0.0.0-20260529120020-be5361af0126Review242026-05-30

Block this in CI

PkgRadar gates github.com/DaanV2/mechanus/server (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/DaanV2/mechanus/[email protected]