PkgRadar

Go modules · proxy.golang.org

github.com/andrewphelpsj/snapd

Remote Payload: matched "cURL "

Why PkgRadar flagged v0.0.0-20260611115605-49b363c11dc2

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/andrewphelpsj/[email protected]/client/interfaces.go
mediumRemote Payloadmatched "cURL " · github.com/andrewphelpsj/[email protected]/cmd/snap/cmd_interface.go
mediumRemote Payloadmatched "cURL " · github.com/andrewphelpsj/[email protected]/daemon/api_json.go
mediumRemote Payloadmatched "cURL " · github.com/andrewphelpsj/[email protected]/interfaces/builtin/common.go
mediumRemote Payloadmatched "cURL " · github.com/andrewphelpsj/[email protected]/interfaces/core.go
mediumRemote Payloadmatched "cURL " · github.com/andrewphelpsj/[email protected]/interfaces/repo.go
mediumRemote Payloadmatched "cURL " · github.com/andrewphelpsj/[email protected]/overlord/devicestate/devicestatetest/gadget.go
mediumRemote Payloadmatched "cURL " · github.com/andrewphelpsj/[email protected]/overlord/devicestate/handlers_serial.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260611115605-49b363c11dc2High risk1062026-06-12
v0.0.0-20260609115017-db3135315884High risk1062026-06-11
v0.0.0-20260604154600-e1bc623cd030High risk1062026-06-06
v0.0.0-20260527102323-156d7779a405Review1062026-05-29

Block this in CI

PkgRadar gates github.com/andrewphelpsj/snapd (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/andrewphelpsj/[email protected]