Go modules · proxy.golang.org
github.com/dapr/components-contrib
Remote Payload: matched "curl "
Why PkgRadar flagged v1.18.0-rc.1.0.20260611165959-f125c43e805f
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "curl " · github.com/dapr/[email protected]/go.mod |
| medium | Remote Payload | matched "curl " · github.com/dapr/[email protected]/go.sum |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v1.18.0-rc.1.0.20260611165959-f125c43e805f | Review | 24 | 2026-06-12 |
v1.17.7 | Review | 24 | 2026-06-09 |
v1.18.0-rc.2 | Review | 24 | 2026-06-09 |
v1.12.0-rc.4.0.20231101224922-8680e2785aca | Review | 24 | 2026-06-08 |
v1.18.0-rc.1.0.20260601203213-0d6569ac4373 | Review | 24 | 2026-06-02 |
v0.0.0-20260601203213-0d6569ac4373 | Review | 24 | 2026-06-02 |
v0.0.0-20260528160629-1a336c166dd3 | Review | 24 | 2026-05-29 |
Block this in CI
pkgradar gate --ecosystem go github.com/dapr/[email protected]