PkgRadar

Go modules · proxy.golang.org

github.com/cloudfoundry-incubator/app-autoscaler

Remote Payload: matched "cURL "

Why PkgRadar flagged v0.0.0-20260615155744-2a5661144029

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/cloudfoundry-incubator/[email protected]/operator/schedulersynchronizer.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260615155744-2a5661144029Review122026-06-17
v0.0.0-20260612174445-37856fc815a5Review122026-06-14
v0.0.0-20260612092947-deca17fed88fReview122026-06-13
v0.0.0-20260611150423-3e5b106a65a5Review122026-06-13
v0.0.0-20260611070745-b4c6af36c519Review122026-06-12
v0.0.0-20260609165249-fc4d9df12072Review122026-06-11
v0.0.0-20260603104435-ec957c2d3e5cReview122026-06-04
v0.0.0-20260602102454-ac932d503291Review122026-06-03
v0.0.0-20260601154619-0e60ea005975Review122026-06-03

Block this in CI

PkgRadar gates github.com/cloudfoundry-incubator/app-autoscaler (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/cloudfoundry-incubator/[email protected]