PkgRadar

Go modules · proxy.golang.org

github.com/bold-Commerce/go-shopify/v3

Remote Payload: matched "cURL "

Why PkgRadar flagged v3.13.0

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/bold-commerce/go-shopify/[email protected]/asset.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v3.13.0Review122026-06-02
v3.4.0Review122026-06-02
v3.14.0Review122026-06-02
v3.10.0Review122026-06-02
v3.15.0Review122026-06-02
v3.11.0Review122026-06-02
v3.4.1Review122026-06-02
v3.2.0Review122026-06-02
v3.6.1Review122026-06-02
v3.3.0Review122026-06-02
v3.5.0Review122026-06-02
v3.12.0Review122026-06-02
v3.9.0Review122026-06-02
v3.7.0Review122026-06-02
v3.6.0Review122026-06-02
v3.1.0Review122026-06-02
v3.8.0Review122026-06-02
v3.16.0Review122026-06-02
v3.17.0Review122026-06-02

Block this in CI

PkgRadar gates github.com/bold-Commerce/go-shopify/v3 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/bold-Commerce/go-shopify/[email protected]
Start free — 25 scans / moView full evidence