PkgRadar

Go modules · proxy.golang.org

github.com/daguflow/dagu

Remote Payload: matched "curl "

Why PkgRadar flagged v1.30.4-0.20260614081315-89a91fac7980

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/daguflow/[email protected]/internal/cmd/example.go
mediumRemote Payloadmatched "cURL " · github.com/daguflow/[email protected]/internal/cmn/config/config.go
mediumRemote Payloadmatched "cURL " · github.com/daguflow/[email protected]/internal/cmn/config/definition.go
mediumRemote Payloadmatched "cURL " · github.com/daguflow/[email protected]/internal/service/frontend/server.go
mediumRemote Payloadmatched "cURL " · github.com/daguflow/[email protected]/internal/service/incident/service.go
mediumRemote Payloadmatched "cURL " · github.com/daguflow/[email protected]/internal/service/notification/service.go
mediumRemote Payloadmatched "cURL " · github.com/daguflow/[email protected]/internal/tunnel/tailscale.go
mediumRemote Payloadmatched "cURL " · github.com/daguflow/[email protected]/internal/tunnel/tunnel.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.30.4-0.20260614081315-89a91fac7980High risk1042026-06-16

Block this in CI

PkgRadar gates github.com/daguflow/dagu (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/daguflow/[email protected]
Start free — 25 scans / moView full evidence