PkgRadar

Go modules · proxy.golang.org

github.com/dosco/graphjin/cmd/v3

Remote Payload: matched "curl "

Why PkgRadar flagged v3.18.40

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/dosco/graphjin/cmd/[email protected]/mcp_query.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v3.18.40Review122026-06-16
v3.18.38Review122026-06-12
v3.18.35Review122026-06-10
v3.18.36Review122026-06-09
v3.18.33Review122026-06-06
v3.18.35-0.20260605061000-782c032ca5ecReview122026-06-06
v3.18.34Review122026-06-06
v3.18.28Review122026-06-03
v3.18.31Review122026-06-03
v3.18.29Review122026-06-03
v3.18.31-0.20260530065547-e7776cac6b79Review122026-05-31
v3.18.30Review122026-05-31

Block this in CI

PkgRadar gates github.com/dosco/graphjin/cmd/v3 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/dosco/graphjin/cmd/[email protected]
Start free — 25 scans / moView full evidence