PkgRadar

Go modules · proxy.golang.org

github.com/archlinuxarm/PKGBUILDs

Remote Payload: matched "curl "

Why PkgRadar flagged v0.0.0-20260528103824-cd49baad784b

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/archlinuxarm/[email protected]/alarm/sprunge/sprunge.sh
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/archlinuxarm/[email protected]/core/filesystem/mklogos.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260616002129-2fd2f6b9da74Low risk02026-06-17
v0.0.0-20260614193532-fd1e7468d38fLow risk02026-06-15
v0.0.0-20260614141622-3f18a7684b0aLow risk02026-06-15
v0.0.0-20260613194849-7d20aa4c4feeLow risk02026-06-14
v0.0.0-20260613182735-e21c1ddb4414Low risk02026-06-14
v0.0.0-20260613172911-81c3e3eeb344Low risk02026-06-14
v0.0.0-20260613103715-0000931acd79Low risk02026-06-14
v0.0.0-20260612232414-60b2a4165040Low risk02026-06-13
v0.0.0-20260612181748-46111d385442Low risk02026-06-13
v0.0.0-20260612021758-8fe4098407d3Low risk02026-06-13
v0.0.0-20260611183924-f9264b50d22fLow risk02026-06-12
v0.0.0-20260610230754-418a0560d0d9Low risk02026-06-11
v0.0.0-20260609231835-fe101225ce8fLow risk02026-06-11
v0.0.0-20260608213158-2e65486ba117Low risk02026-06-09
v0.0.0-20260607214327-2aa0f4058cfcLow risk02026-06-08
v0.0.0-20260607114135-1a949da303a1Low risk02026-06-08
v0.0.0-20260606124731-9245a14df6e7Low risk02026-06-07
v0.0.0-20260605234646-9be49b130103Low risk02026-06-07
v0.0.0-20260605231643-750617128c15Low risk02026-06-06
v0.0.0-20260605153900-8c2f79003990Low risk02026-06-06
v0.0.0-20260604181949-800115bb708dLow risk02026-06-05
v0.0.0-20260604124940-16f88fd6b731Low risk02026-06-05
v0.0.0-20260604003833-ae70f9e431d5Low risk02026-06-05
v0.0.0-20260603112640-eb17cee7c0b3Low risk02026-06-04
v0.0.0-20260602232217-61df0da66bd8Low risk02026-06-04
v0.0.0-20260602193123-f19006a6601fLow risk02026-06-03
v0.0.0-20260602185334-b63952b5aaedLow risk02026-06-03
v0.0.0-20260602134801-896ac90e438aLow risk02026-06-03
v0.0.0-20260602102814-cdba950d6e68Low risk02026-06-03
v0.0.0-20260601183259-a35e17f437cfLow risk02026-06-02
v0.0.0-20260601103451-ca31a09b8815Low risk02026-06-02
v0.0.0-20260531201941-1744a19b92caLow risk02026-06-01
v0.0.0-20260531141953-e3f4ade41bc4Low risk02026-06-01
v0.0.0-20260531123111-5223183ea58aLow risk02026-06-01
v0.0.0-20260531102707-cf6ae8192f9aLow risk02026-06-01
v0.0.0-20260531092424-30d36f136002Low risk02026-06-01
v0.0.0-20260530182858-547a4663a777Low risk02026-05-31
v0.0.0-20260530152821-e4be2026b5a0Low risk02026-05-31
v0.0.0-20260530014124-0a5b022f8f86Low risk02026-05-31
v0.0.0-20260529175818-884470c5bae5Low risk02026-05-30
v0.0.0-20260528230101-6dec32d96b2fLow risk02026-05-30
v0.0.0-20260528181044-2ac21a174fb1Low risk02026-05-29
v0.0.0-20260528103824-cd49baad784bReview242026-05-29

Block this in CI

PkgRadar gates github.com/archlinuxarm/PKGBUILDs (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/archlinuxarm/[email protected]