PkgRadar

Go modules · proxy.golang.org

github.com/asgardeo/thunder/backend

Remote Payload: matched "cURL "

Why PkgRadar flagged v0.0.0-20260616114841-572372c82349

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/asgardeo/thunder/[email protected]/internal/system/config/config.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260616114841-572372c82349Review122026-06-17
v0.0.0-20260616114754-14f9d6c6c5abReview122026-06-17
v0.0.0-20260616104104-e3e384bb4ed5Review122026-06-17
v0.0.0-20260616091221-e867888e6f5eReview122026-06-17
v0.0.0-20260615160643-412238b61da1Review122026-06-16
v0.0.0-20260614103959-56b01313f712Review122026-06-15
v0.0.0-20260612182930-fc0922b085b1Review122026-06-13
v0.0.0-20260611114707-31937f544bf3Review122026-06-12
v0.0.0-20260611110742-732662a2134dReview122026-06-12
v0.0.0-20260611083742-fa8a6086ddbbReview122026-06-12
v0.0.0-20260611074553-70bd501284d3Review122026-06-12
v0.0.0-20260611064308-3128c48ff924Review122026-06-12
v0.0.0-20260609172411-fa048fe02789Review122026-06-10
v0.0.0-20260605203841-ba427bf5d8daReview122026-06-07
v0.0.0-20260529082934-111ad3cb0dc6Review122026-05-30

Block this in CI

PkgRadar gates github.com/asgardeo/thunder/backend (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/asgardeo/thunder/[email protected]