PkgRadar

Go modules · proxy.golang.org

github.com/anushasunkada/thunder/backend

Remote Payload: matched "cURL "

Why PkgRadar flagged v0.0.0-20260615203205-e8c4212b5c6d

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/anushasunkada/thunder/[email protected]/internal/system/config/config.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260615203205-e8c4212b5c6dReview122026-06-16
v0.0.0-20260614103959-56b01313f712Review122026-06-16
v0.0.0-20260607190135-05f8de3b6355Review122026-06-08
v0.0.0-20260607180717-2f4962bce68aReview122026-06-08
v0.0.0-20260605135755-312b08d19164Review122026-06-06
v0.0.0-20260602112457-6ed99ba02d5bReview122026-06-03
v0.0.0-20260602044009-cbb9a603f548Review122026-06-03
v0.0.0-20260531205515-76a27c7be6e1Review122026-06-01
v0.0.0-20260531173111-fb56c4c3624dReview122026-06-01
v0.0.0-20260522105903-dc6c53485b6dReview122026-05-31

Block this in CI

PkgRadar gates github.com/anushasunkada/thunder/backend (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/anushasunkada/thunder/[email protected]