PkgRadar

Go modules · proxy.golang.org

github.com/SAPPHIR3-ROS3/Solomon/v2026

Remote Payload: matched "github.com/%s/%s/releases/download"

Why PkgRadar flagged v2026.611.1

SeveritySignalEvidence
mediumRemote Payloadmatched "github.com/%s/%s/releases/download" · github.com/sapphir3-ros3/solomon/[email protected]/internal/updater/install.go
mediumRemote Payloadmatched "curl " · github.com/sapphir3-ros3/solomon/[email protected]/internal/updater/restart.go
mediumCredential file accessmatched ".npmrc" · github.com/sapphir3-ros3/solomon/[email protected]/internal/integrations/cursor/bootstrap.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v2026.611.1Review342026-06-12
v2026.610.2Review342026-06-12
v2026.610.0Review342026-06-11
v2026.610.1Review342026-06-11
v2026.609.4-0.20260609112519-6f2e40eff554Review342026-06-10
v2026.608.1Review342026-06-10
v2026.606.0Review342026-06-10
v2026.602.2Review102026-06-10
v2026.606.3Review342026-06-10
v2026.605.0Review342026-06-10
v2026.602.3Review222026-06-10
v2026.609.2Review342026-06-10
v2026.606.2Review342026-06-10
v2026.606.1Review342026-06-10
v2026.608.0Review342026-06-10
v2026.602.1Review102026-06-03
v2026.529.2Review102026-05-30
v2026.529.1Review102026-05-30
v2026.529.1-0.20260529093923-e095f58b6245Review102026-05-30

Block this in CI

PkgRadar gates github.com/SAPPHIR3-ROS3/Solomon/v2026 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/SAPPHIR3-ROS3/Solomon/[email protected]