PkgRadar

Go modules · proxy.golang.org

github.com/Zeromicro/go-zero

Remote Payload: matched "curl "

Why PkgRadar flagged v1.7.4

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/zeromicro/[email protected]/go.mod
mediumRemote Payloadmatched "curl " · github.com/zeromicro/[email protected]/go.sum

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.7.4Review242026-06-02
v1.6.4Review242026-06-02
v1.0.0Low risk02026-06-02
v1.2.3Low risk02026-06-02
v1.1.3-preLow risk02026-06-02
v1.8.3Review242026-06-02
v1.5.1Review242026-06-02
v1.7.2Review242026-06-02
v1.8.0Review242026-06-02
v1.0.4Low risk02026-06-02
v1.0.18Low risk02026-06-02
v1.0.2Low risk02026-06-02
v1.1.2Low risk02026-06-02
v1.8.4Review242026-06-02
v1.9.2Review242026-06-02
v1.3.1Low risk02026-06-02
v1.0.13Low risk02026-06-02
v1.9.4Review242026-06-02
v1.1.0Low risk02026-06-02
v1.0.16Low risk02026-06-02
v1.0.14Low risk02026-06-02
v1.0.27Low risk02026-06-02
v1.1.6Low risk02026-06-02
v1.0.17Low risk02026-06-02
v1.1.10Low risk02026-06-02
v1.1.3Low risk02026-06-02
v1.0.15Low risk02026-06-02
v1.7.1Review242026-06-02
v1.0.24Low risk02026-06-02
v1.7.5Review242026-06-02
v1.8.1Review242026-06-02
v1.4.2Review242026-06-02
v1.0.19Low risk02026-06-02
v1.8.2Review242026-06-02
v1.5.6Review242026-06-02
v1.10.1Review242026-06-02
v1.1.3-betaLow risk02026-06-02
v1.3.0-betaLow risk02026-06-02
v1.0.20Low risk02026-06-02
v1.10.0Review242026-06-02
v1.3.4Low risk02026-06-02
v1.8.5Review242026-06-02
v1.1.8Low risk02026-06-02
v1.5.5Review242026-06-02
v1.2.4Low risk02026-06-02
v1.2.0Low risk02026-06-02
v1.3.2Low risk02026-06-02
v1.1.5Low risk02026-06-02
v1.9.3Review242026-06-02
v1.0.12Low risk02026-06-02
v1.9.1Review242026-06-02
v1.5.2Review242026-06-02
v1.9.0Review242026-06-02
v1.0.9Low risk02026-06-02
v1.4.3Review242026-06-02
v1.1.1Low risk02026-06-02
v1.2.1Low risk02026-06-02
v1.0.1Low risk02026-06-02
v1.6.1Review242026-06-02
v1.3.5Low risk02026-06-02
v1.6.5Review242026-06-02
v1.0.22Low risk02026-06-02
v1.2.5Low risk02026-06-02
v1.4.1Review242026-06-02
v1.2.2Low risk02026-06-02
v1.3.0Low risk02026-06-02
v1.0.5Low risk02026-06-02
v1.0.3Low risk02026-06-02
v1.1.7Low risk02026-06-02
v1.0.8Low risk02026-06-02
v1.1.9Low risk02026-06-02
v1.0.10Low risk02026-06-02
v1.10.2Review242026-06-02
v1.7.0Review242026-06-02
v1.1.4Low risk02026-06-02
v1.0.25Low risk02026-06-02
v1.4.4Review242026-06-02
v1.0.29Low risk02026-06-02
v1.0.6Low risk02026-06-02
v1.0.26Low risk02026-06-02
v1.5.4Review242026-06-02
v1.6.3Review242026-06-02
v1.0.23Low risk02026-06-02
v1.6.2Review242026-06-02
v1.3.0-alphaLow risk02026-06-02
v1.0.7Low risk02026-06-02
v1.3.3Low risk02026-06-02
v1.0.28Low risk02026-06-02
v1.4.0Review242026-06-02
v1.0.21Low risk02026-06-02
v1.0.11Low risk02026-06-02
v1.7.3Review242026-06-02
v1.6.6Review242026-06-02
v1.4.5Review242026-06-02
v1.5.3Review242026-06-02
v1.5.0Review242026-06-02
v1.7.6Review242026-06-02
v1.6.0Review242026-06-02

Block this in CI

PkgRadar gates github.com/Zeromicro/go-zero (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/Zeromicro/[email protected]