PkgRadar

Go modules · proxy.golang.org

github.com/apache/plc4x

Remote Payload: matched "wget "

Why PkgRadar flagged v0.0.0-20260528071624-c771277ea27c

SeveritySignalEvidence
mediumRemote Payloadmatched "wget " · github.com/apache/[email protected]/plc4c/fetch-dependencies.sh
mediumRemote Payloadmatched "curl " · github.com/apache/[email protected]/tools/release-2-prepare-release.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260616104925-e3e0e08bf577Low risk02026-06-17
v0.0.0-20260616072235-d10dd8f618efLow risk02026-06-17
v0.0.0-20260615070151-f577e1593abdLow risk02026-06-16
v0.0.0-20260615064000-043890842c36Low risk02026-06-16
v0.0.0-20260612161700-8e7b6f0a1a16Low risk02026-06-13
v0.0.0-20260612133524-d647688d5df8Low risk02026-06-13
v0.0.0-20260612131344-7f2f3aa781c2Low risk02026-06-13
v0.0.0-20260612114021-4110b4e4b9ecLow risk02026-06-13
v0.0.0-20260612111016-aebe46b35ef8Low risk02026-06-13
v0.0.0-20260612095839-165cf6621648Low risk02026-06-13
v0.0.0-20260612091336-745df367e0a6Low risk02026-06-13
v0.0.0-20260611064108-efbf528f46fcLow risk02026-06-12
v0.0.0-20260609085124-f81d03778eaaLow risk02026-06-10
v0.0.0-20260608071609-44d752328680Low risk02026-06-09
v0.0.0-20260608055340-74835dfd2322Low risk02026-06-09
v0.0.0-20260602194613-977dc707d590Low risk02026-06-03
v0.0.0-20260602110136-56898304660eLow risk02026-06-03
v0.0.0-20260529141237-32b4f0c93e8fLow risk02026-05-30
v0.0.0-20260528071624-c771277ea27cReview242026-05-29
v0.0.0-20260528064257-f701b5ecef25Review242026-05-29

Block this in CI

PkgRadar gates github.com/apache/plc4x (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/apache/[email protected]