PkgRadar

Go modules · proxy.golang.org

github.com/K1Low/runn

Remote Payload: matched "curl "

Why PkgRadar flagged v0.123.1

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/k1low/[email protected]/go.mod
mediumRemote Payloadmatched "curl " · github.com/k1low/[email protected]/go.sum
mediumRemote Payloadmatched "curl " · github.com/k1low/[email protected]/runbook.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.123.1High risk412026-06-18
v0.37.2Low risk02026-06-18
v0.3.0Low risk02026-06-18
v0.128.2High risk412026-06-18
v0.59.3High risk362026-06-18
v1.6.0Review292026-06-18
v0.63.2High risk362026-06-18
v0.128.0High risk412026-06-18
v0.70.1High risk362026-06-18
v0.112.3High risk412026-06-18
v0.37.0Low risk02026-06-18
v0.5.2Low risk02026-06-18
v0.75.1High risk362026-06-18
v1.9.3-0.20260615013558-9653718460deReview292026-06-18

Block this in CI

PkgRadar gates github.com/K1Low/runn (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/K1Low/[email protected]
Start free — 25 scans / moView full evidence