PkgRadar

Go modules · proxy.golang.org

github.com/LerianStudio/lib-commons/v5

Remote Payload: matched "cURL "

Why PkgRadar flagged v5.6.1-beta.1

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/lerianstudio/lib-commons/[email protected]/commons/net/http/openapi/openapi.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v5.6.1-beta.1Review122026-06-15
v5.6.2-0.20260614181729-af308941387aReview122026-06-15
v5.6.1Review122026-06-15
v5.6.0-beta.3Review122026-06-15
v5.6.0-beta.4Review122026-06-15
v5.6.1-0.20260614004723-d6b2224e350cReview122026-06-15
v5.6.0Review122026-06-15
v5.5.4-0.20260612204954-fc125dde1273Low risk02026-06-13
v5.5.3Low risk02026-06-13
v5.6.0-beta.2Low risk02026-06-12
v5.5.2Low risk02026-06-12
v5.6.0-beta.1.0.20260611170222-31812e9af760Low risk02026-06-12
v5.5.1Low risk02026-06-11
v5.5.1-0.20260607032524-6ac209221a9fLow risk02026-06-08
v5.5.0Low risk02026-06-08
v5.5.0-beta.1Low risk02026-06-02
v5.1.2Low risk02026-05-31
v5.4.2-0.20260530193813-0bb1c9d47236Low risk02026-05-31
v5.4.1Low risk02026-05-31
v5.3.3Low risk02026-05-31
v5.3.2Low risk02026-05-30

Block this in CI

PkgRadar gates github.com/LerianStudio/lib-commons/v5 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/LerianStudio/lib-commons/[email protected]
Start free — 25 scans / moView full evidence