PkgRadar

Go modules · proxy.golang.org

github.com/devsy-org/devsy

Remote Payload: matched "cURL "

Why PkgRadar flagged v1.10.0-beta.17.0.20260601004300-183d73322adf

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/devsy-org/[email protected]/cmd/root.go
mediumRemote Payloadmatched "github.com/%s/releases/download" · github.com/devsy-org/[email protected]/hack/rewrite_manifest_urls/main.go
mediumRemote Payloadmatched "curl " · github.com/devsy-org/[email protected]/pkg/dockerinstall/debian.go
mediumRemote Payloadmatched "cURL " · github.com/devsy-org/[email protected]/pkg/errors/errors.go
mediumRemote Payloadmatched "cURL " · github.com/devsy-org/[email protected]/pkg/errors/patterns.go
mediumRemote Payloadmatched "github.com/coder/code-server/releases/download" · github.com/devsy-org/[email protected]/pkg/ide/codeserver/codeserver.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/devsy-org/[email protected]/pkg/ide/ideparse/parse.go
mediumRemote Payloadmatched "github.com/gitpod-io/openvscode-server/releases/download" · github.com/devsy-org/[email protected]/pkg/ide/openvscode/openvscode.go
mediumRemote Payloadmatched "github.com/%s/releases/download" · github.com/devsy-org/[email protected]/pkg/workspace/provider.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.10.0-beta.17.0.20260601004300-183d73322adfHigh risk1102026-06-03
v1.10.0-beta.17High risk1102026-06-03
v1.10.0-beta.16.0.20260530155413-42455f172aa8High risk1102026-05-31
v1.10.0-beta.13High risk1102026-05-31
v1.10.0-beta.12High risk1062026-05-31
v1.10.0-beta.15High risk1102026-05-31
v1.10.0-beta.16High risk1102026-05-31
v1.10.0-beta.14High risk1102026-05-31
v1.10.0-beta.11Review1062026-05-29
v1.10.0-beta.10.0.20260528230109-8daa97843a0bReview1062026-05-29
v1.10.0-beta.10Review1062026-05-29
v1.10.0-beta.9Review1062026-05-29

Block this in CI

PkgRadar gates github.com/devsy-org/devsy (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/devsy-org/[email protected]