PkgRadar

Go modules · proxy.golang.org

github.com/LF-Decentralized-Trust-labs/paladin

Remote Payload: matched "curl "

Why PkgRadar flagged v0.0.0-20260528085524-47bfed5c98d9

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/lf-decentralized-trust-labs/[email protected]/prototype/wazero/test.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260611160930-3364d5be992cLow risk02026-06-12
v0.11.1-0.20260611150851-084adb24df09Low risk02026-06-12
v0.0.0-20260611150851-084adb24df09Low risk02026-06-12
v0.11.1-0.20260610182431-c3eff361d76fLow risk02026-06-12
v0.0.0-20260610182431-c3eff361d76fLow risk02026-06-12
v0.11.1-0.20260610144234-391bb8ecaa42Low risk02026-06-11
v0.0.0-20260610144234-391bb8ecaa42Low risk02026-06-11
v0.11.1-0.20260609155223-723b457b51c5Low risk02026-06-11
v0.0.0-20260609155223-723b457b51c5Low risk02026-06-11
v0.11.1-0.20260604105623-85949146f482Low risk02026-06-05
v0.11.1-0.20260602153024-460bcc4abfc0Low risk02026-06-03
v0.0.0-20260602153024-460bcc4abfc0Low risk02026-06-03
v1.0.0-rc.10Low risk02026-05-30
v0.0.0-20260528085524-47bfed5c98d9Review122026-05-29

Block this in CI

PkgRadar gates github.com/LF-Decentralized-Trust-labs/paladin (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/LF-Decentralized-Trust-labs/[email protected]
Start free — 25 scans / moView full evidence