PkgRadar

Go modules · proxy.golang.org

github.com/alibaba/opensandbox

Remote Payload: matched "curl "

Why PkgRadar flagged v0.0.0-20260528053853-6ed74de6b93b

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/alibaba/[email protected]/server/tests/smoke.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260616065032-aaf3cb68938eLow risk02026-06-17
v0.0.0-20260616061557-cdb32590c72fLow risk02026-06-17
v0.0.0-20260616035659-0527d851a555Low risk02026-06-17
v0.0.0-20260616033307-afe451a5380dLow risk02026-06-17
v0.0.0-20260616012434-67cdad61cdbfLow risk02026-06-17
v0.0.0-20260615130249-691989398667Low risk02026-06-16
v0.0.0-20260615114513-4bcef31c6c29Low risk02026-06-16
v0.0.0-20260615064314-35029e20a3c3Low risk02026-06-16
v0.0.0-20260615060124-26292cd5561bLow risk02026-06-16
v0.0.0-20260615043319-322b57bff06bLow risk02026-06-16
v0.0.0-20260615033636-a5fdf7ffabc3Low risk02026-06-16
v0.0.0-20260615021541-5d479e51de4dLow risk02026-06-16
v0.0.0-20260612085040-876839504e56Low risk02026-06-13
v0.0.0-20260612034608-b2dbd657fa86Low risk02026-06-13
v0.0.0-20260611095108-1505483a2bffLow risk02026-06-12
v0.0.0-20260611061259-a979d543efd3Low risk02026-06-12
v0.0.0-20260609153533-476bb979cb46Low risk02026-06-10
v0.0.0-20260609113445-9663973089bbLow risk02026-06-10
v0.0.0-20260609015016-aab805effd80Low risk02026-06-10
v0.0.0-20260608103412-9b532554db01Low risk02026-06-09
v0.0.0-20260608082543-bb47d01af42fLow risk02026-06-09
v0.0.0-20260608033405-6cc55f274b9aLow risk02026-06-09
v0.0.0-20260605121812-d980b3b96b3aLow risk02026-06-06
v0.0.0-20260605094634-0742847c00b7Low risk02026-06-06
v0.0.0-20260604035850-ccb5a6cc5bbdLow risk02026-06-05
v0.0.0-20260408080202-9bd27a685062Low risk02026-06-04
v0.0.0-20260531013843-49109fa6f725Low risk02026-06-01
v0.0.0-20260528053853-6ed74de6b93bReview152026-05-29

Block this in CI

PkgRadar gates github.com/alibaba/opensandbox (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/alibaba/[email protected]