Go modules · proxy.golang.org
github.com/convergent-systems-co/aiconstitution
Remote Payload: matched "cURL "
Why PkgRadar flagged v1.8.0
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "cURL " · github.com/convergent-systems-co/[email protected]/src/cmd/ai/cmd/setup.go |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v1.8.0 | Review | 12 | 2026-06-04 |
v1.7.3 | Review | 12 | 2026-06-02 |
v1.7.0 | Low risk | 0 | 2026-06-02 |
v1.7.1 | Low risk | 0 | 2026-06-02 |
v1.6.1-0.20260531184611-6a4d4d6651fe | Low risk | 0 | 2026-06-02 |
v1.6.0 | Low risk | 0 | 2026-06-02 |
v0.0.0-20260531184611-6a4d4d6651fe | Low risk | 0 | 2026-06-02 |
v1.5.4-0.20260531015732-7afce765db15 | Low risk | 0 | 2026-06-01 |
v1.5.2 | Low risk | 0 | 2026-06-01 |
v1.5.4-0.20260531012359-03c37d6861a2 | Low risk | 0 | 2026-06-01 |
v1.5.3 | Low risk | 0 | 2026-06-01 |
v1.4.0 | Low risk | 0 | 2026-05-31 |
v1.3.2 | Low risk | 0 | 2026-05-31 |
v1.3.0 | Low risk | 0 | 2026-05-31 |
v1.5.1 | Low risk | 0 | 2026-05-31 |
Block this in CI
pkgradar gate --ecosystem go github.com/convergent-systems-co/[email protected]