PkgRadar

Go modules · proxy.golang.org

github.com/dshmyz/qim/qim-server

Remote Payload: matched "curl "

Why PkgRadar flagged v0.0.0-20260528061016-0ccc844567ec

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/dshmyz/qim/[email protected]/test_new_apis.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260603075325-e76cb9f99f33Low risk02026-06-05
v0.0.0-20260603050907-b5e3fa0e4540Low risk02026-06-04
v0.0.0-20260602125236-f5c2896c394cLow risk02026-06-03
v0.0.0-20260601051625-dca95dba2559Low risk02026-06-02
v0.0.0-20260528061016-0ccc844567ecReview122026-05-29

Block this in CI

PkgRadar gates github.com/dshmyz/qim/qim-server (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/dshmyz/qim/[email protected]