PkgRadar

Go modules · proxy.golang.org

github.com/canpok1/vox-radio

Remote Payload: matched "curl "

Why PkgRadar flagged v0.0.23

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/canpok1/[email protected]/internal/cli/init.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.23Review122026-06-18
v0.0.23-0.20260616110418-de40dca7ebfaLow risk02026-06-17
v0.0.22-0.20260616003721-6ce3c8c55471Low risk02026-06-17
v0.0.21Low risk02026-06-17
v0.0.20-0.20260615003600-fc7374b0432dLow risk02026-06-16
v0.0.17Low risk02026-06-14
v0.0.16-0.20260610052917-5b0eb7864b0bLow risk02026-06-11
v0.0.13Low risk02026-06-11
v0.0.11-0.20260606162639-9ead93f92d09Low risk02026-06-07
v0.0.10Low risk02026-06-07
v0.0.10-0.20260605173534-0ef4e12ffd06Low risk02026-06-06
v0.0.9Low risk02026-06-06
v0.0.7Low risk02026-06-05
v0.0.7-0.20260604160717-d214a2bf293aLow risk02026-06-05
v0.0.4Low risk02026-06-05
v0.0.1Low risk02026-06-04
v0.0.2Low risk02026-06-04
v0.0.3Low risk02026-06-04

Block this in CI

PkgRadar gates github.com/canpok1/vox-radio (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/canpok1/[email protected]
Start free — 25 scans / moView full evidence