Go modules · proxy.golang.org
github.com/Jeffail/benthos/v4
Remote Payload: matched "github.com/build-trust/ockam/releases/download"
Why PkgRadar flagged v4.96.1
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "github.com/build-trust/ockam/releases/download" · github.com/jeffail/benthos/[email protected]/internal/impl/ockam/command.go |
| medium | Remote Payload | matched "github.com/ollama/ollama/releases/download" · github.com/jeffail/benthos/[email protected]/internal/impl/ollama/subprocess_unix.go |
| medium | Remote Payload | matched "cURL " · github.com/jeffail/benthos/[email protected]/internal/impl/otlp/input_http.go |
| medium | Remote Payload | matched "cURL " · github.com/jeffail/benthos/[email protected]/internal/impl/redpanda/migrator/migrator_schema_registry.go |
| medium | Remote Payload | matched "curl " · github.com/jeffail/benthos/[email protected]/internal/impl/snowflake/output_snowflake_put.go |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v4.96.1 | High risk | 83 | 2026-06-13 |
v4.95.1-0.20260605101924-9eb5e70b3d22 | High risk | 83 | 2026-06-06 |
v4.94.2-0.20260602140305-7057e7ce8280 | High risk | 83 | 2026-06-04 |
v4.94.0 | High risk | 83 | 2026-06-04 |
v4.94.2-0.20260601112555-26167f95694f | High risk | 83 | 2026-06-03 |
Block this in CI
pkgradar gate --ecosystem go github.com/Jeffail/benthos/[email protected]