PkgRadar

Go modules · proxy.golang.org

github.com/cosmos/cosmos-sdk

Remote Payload: matched "cURL "

Why PkgRadar flagged v0.54.0-rc.1.0.20260527205110-d149b95712b2

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/cosmos/[email protected]/x/upgrade/plan/info_test.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260609153854-0b6929187c76Low risk02026-06-10
v0.54.0-rc.1.0.20260608160940-97a4ee0f5441Low risk02026-06-09
v0.34.4-0.20200424155207-e9b5fc971690Low risk02026-06-08
v0.34.4-0.20200515185843-86a975050818Low risk02026-06-08
v0.28.2-0.20190612112227-b096357d9957Low risk02026-06-08
v0.54.0-rc.1.0.20260605195734-e57dc5eeb163Low risk02026-06-06
v0.0.0-20260605195734-e57dc5eeb163Low risk02026-06-06
v0.54.4-0.20260605153940-cc1e364cdb94Low risk02026-06-06
v0.0.0-20260605142003-71efc78ae647Low risk02026-06-06
v0.54.0-rc.1.0.20260605010014-89836e061d81Low risk02026-06-06
v0.0.0-20260605010014-89836e061d81Low risk02026-06-06
v0.54.0-rc.1.0.20260604203845-443b17e55366Low risk02026-06-05
v0.0.0-20260604203845-443b17e55366Low risk02026-06-05
v0.54.0-rc.1.0.20260604182445-06363342bf7aLow risk02026-06-05
v0.0.0-20260604182445-06363342bf7aLow risk02026-06-05
v0.0.0-20260602153612-1236be839aa3Low risk02026-06-03
v0.54.0-rc.1.0.20260601182506-18c5737148bdLow risk02026-06-02
v0.0.0-20260601182506-18c5737148bdLow risk02026-06-02
v0.0.0-20260601174552-9b890520e933Low risk02026-06-02
v0.54.0-rc.1.0.20260601170741-5f20bfdb69a3Low risk02026-06-02
v0.0.0-20260601170741-5f20bfdb69a3Low risk02026-06-02
v0.54.0-rc.1.0.20260601153223-34084104107aLow risk02026-06-02
v0.0.0-20260601153223-34084104107aLow risk02026-06-02
v0.34.4-0.20191217182852-347125678557Low risk02026-06-01
v0.54.0-rc.1.0.20260528185115-ebb120a1b5a8Low risk02026-05-29
v0.54.0-rc.1.0.20260527205110-d149b95712b2Review122026-05-29

Block this in CI

PkgRadar gates github.com/cosmos/cosmos-sdk (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/cosmos/[email protected]