PkgRadar

Go modules · proxy.golang.org

github.com/chachamaru127/claude-code-harness

Remote Payload: matched "curl "

Why PkgRadar flagged v4.12.12-0.20260527195149-f9811d89e9f9+incompatible

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/chachamaru127/[email protected]+incompatible/tests/test-antigravity-unknown-boundary.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
v4.13.4-0.20260601101625-7f8279a58d62+incompatibleLow risk02026-06-02
v4.13.3+incompatibleLow risk02026-06-02
v0.0.0-20260601101625-7f8279a58d62Low risk02026-06-02
v4.13.0+incompatibleLow risk02026-06-01
v4.13.1+incompatibleLow risk02026-06-01
v4.13.3-0.20260531181226-e8538435e451+incompatibleLow risk02026-06-01
v4.13.2+incompatibleLow risk02026-06-01
v4.11.2+incompatibleLow risk02026-05-29
v4.12.10+incompatibleLow risk02026-05-29
v4.12.1+incompatibleLow risk02026-05-29
v4.11.3+incompatibleLow risk02026-05-29
v4.12.6+incompatibleLow risk02026-05-29
v4.11.4+incompatibleLow risk02026-05-29
v4.12.7+incompatibleLow risk02026-05-29
v4.12.4+incompatibleLow risk02026-05-29
v4.12.12-0.20260527195149-f9811d89e9f9+incompatibleReview122026-05-29
v0.0.0-20260527195149-f9811d89e9f9Review122026-05-29
v4.12.11+incompatibleReview122026-05-29

Block this in CI

PkgRadar gates github.com/chachamaru127/claude-code-harness (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/chachamaru127/[email protected]+incompatible
Start free — 25 scans / moView full evidence