PkgRadar

Go modules · proxy.golang.org

github.com/carlosprados/picoclaw

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged v0.1.1

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/carlosprados/[email protected]/pkg/skills/installer.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.1.1Review122026-06-15
v0.2.1Review242026-06-15
v0.2.2-nightly.20260312.6612ca09Review242026-06-15
v0.2.3Review242026-06-15
v0.1.2Review122026-06-15
v0.2.6Review122026-06-15
v0.2.4Review122026-06-15
v0.2.8Review242026-06-15
v0.2.5Review122026-06-15
v0.0.1Review122026-06-15
v0.2.2Review242026-06-15
v0.2.10-0.20260614100754-9eadffda1e7dReview242026-06-15
v0.2.7Review242026-06-15
v0.2.0Review242026-06-15
v0.2.10-0.20260613161935-cf67dd3851e7Review242026-06-15
v0.2.9Review242026-06-15
v0.2.10-0.20260614095232-e55ddf2e24c8Review242026-06-15

Block this in CI

PkgRadar gates github.com/carlosprados/picoclaw (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/carlosprados/[email protected]
Start free — 25 scans / moView full evidence