PkgRadar

Go modules · proxy.golang.org

github.com/caltechlibrary/dataset/v2

Remote Payload: matched "cURL "

Why PkgRadar flagged v2.5.2-0.20260604003409-fed61428ba37

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/caltechlibrary/dataset/[email protected]/helptext.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v2.5.2-0.20260604003409-fed61428ba37Review122026-06-05
v2.5.1Review122026-06-05
v2.4.1-rc2Review122026-06-02
v2.5.1-0.20260529213252-29b7fff7548dReview122026-05-31
v2.4.1-rc1.0.20260528234132-2d96591fe117Review122026-05-30
v2.4.1-rc1Review122026-05-30

Block this in CI

PkgRadar gates github.com/caltechlibrary/dataset/v2 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/caltechlibrary/dataset/[email protected]