PkgRadar

Go modules · proxy.golang.org

github.com/Safing/spn

Remote Payload: matched "curl "

Why PkgRadar flagged v0.3.15

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/safing/[email protected]/cmds/clientsim/client.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.6.14Low risk02026-06-10
v0.6.19Low risk02026-06-10
v0.6.0Low risk02026-06-10
v0.7.3Low risk02026-06-10
v0.4.1Low risk02026-06-10
v0.4.11Low risk02026-06-10
v0.6.17Low risk02026-06-10
v0.7.6Low risk02026-06-10
v0.3.15Review122026-06-10
v0.4.14Low risk02026-06-10
v0.4.3Low risk02026-06-10
v0.4.5Low risk02026-06-10
v0.5.7Low risk02026-06-10
v0.6.13Low risk02026-06-10
v0.2.5Review122026-06-10
v0.6.22Low risk02026-06-10
v0.6.7Low risk02026-06-10
v0.7.2Low risk02026-06-10
v0.5.8Low risk02026-06-10
v0.6.16Low risk02026-06-10
v0.6.8Low risk02026-06-10

Block this in CI

PkgRadar gates github.com/Safing/spn (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/Safing/[email protected]
Start free — 25 scans / moView full evidence