Go modules · proxy.golang.org
github.com/FriendsOfShopware/shopware-cli
Remote Payload: matched "curl "
Why PkgRadar flagged v0.0.0-20260603050536-fa817606b4bc
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "curl " · github.com/friendsofshopware/[email protected]/cmd/project/project_admin_api.go |
| medium | Remote Payload | matched "curl\n\n" · github.com/friendsofshopware/[email protected]/internal/curl/curl_wrapper.go |
| medium | Remote Payload | matched "github.com/sass/dart-sass/releases/download" · github.com/friendsofshopware/[email protected]/internal/esbuild/download_unix.go |
| medium | Remote Payload | matched "github.com/sass/dart-sass/releases/download" · github.com/friendsofshopware/[email protected]/internal/esbuild/download_windows.go |
| medium | Remote Payload | matched "raw.githubusercontent.com" · github.com/friendsofshopware/[email protected]/internal/extension/platform.go |
| medium | Remote Payload | matched "raw.githubusercontent.com" · github.com/friendsofshopware/[email protected]/internal/flexmigrator/composer.go |
| medium | Remote Payload | matched "github.com/shopwareLabs/php-cli-wasm-binaries/releases/download" · github.com/friendsofshopware/[email protected]/internal/phplint/download.go |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v0.0.0-20260603050536-fa817606b4bc | High risk | 84 | 2026-06-05 |
v0.0.0-20260529083737-3b17b01a9ac7 | Review | 84 | 2026-05-30 |
Block this in CI
pkgradar gate --ecosystem go github.com/FriendsOfShopware/[email protected]