PkgRadar

Go modules · proxy.golang.org

github.com/Tangerg/lynx/tools

Remote Payload: matched "curl "

Why PkgRadar flagged v0.0.0-20260613123744-7620bbaf9735

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/tangerg/lynx/[email protected]/webfetch/tool.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260613123744-7620bbaf9735Review122026-06-14
v0.0.0-20260613093005-d09e171fcedeReview122026-06-14
v0.0.0-20260612081219-768ced2941f7Review122026-06-13
v0.0.0-20260612074151-b041faa6c4a2Review122026-06-13
v0.0.0-20260611175144-4ac939c822c7Review122026-06-12
v0.0.0-20260611170121-1874c80c51d4Review122026-06-12
v0.0.0-20260609172019-f4f4c39c6ef2Review122026-06-10
v0.0.0-20260609163242-2de09d16380aReview122026-06-10
v0.0.0-20260609155032-ca51cfca94c1Review122026-06-10
v0.0.0-20260609154908-0fc90583038bReview122026-06-10
v0.0.0-20260605110741-c2ed3864c2b2Review122026-06-06
v0.0.0-20260605095113-a0705a11cab4Review122026-06-06
v0.0.0-20260521192654-2bfa114b8137Review122026-05-30

Block this in CI

PkgRadar gates github.com/Tangerg/lynx/tools (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/Tangerg/lynx/[email protected]