PkgRadar

Go modules · proxy.golang.org

github.com/dymensionxyz/optimint

Remote Payload: matched "CURL "

Why PkgRadar flagged v1.6.0-rc02

SeveritySignalEvidence
mediumRemote Payloadmatched "CURL " · github.com/dymensionxyz/[email protected]/da/sui/config.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.3.2Low risk02026-06-03
v0.3.1Low risk02026-06-03
v1.6.0-rc02Review122026-06-03
v0.3.0Low risk02026-06-03
v1.5.2-rc01Review122026-06-03
v1.5.1-rc01Review122026-06-03
v0.3.4Low risk02026-06-03
v1.5.0-rc01Review122026-06-03
v0.3.5Review122026-06-03
v1.6.0-rc04Review122026-06-03
v0.1.0Low risk02026-06-03
v0.1.1Low risk02026-06-03
v0.4.0Low risk02026-06-03
v1.5.3-rc01Review122026-06-03
v1.6.0-rc01Review122026-06-03
v1.5.1Review122026-06-03
v0.1.0-alphaReview122026-06-03
v1.5.0-rc02Review122026-06-03
v1.6.0-rc03Review122026-06-03
v1.5.3-rc02Review122026-06-03
v1.5.2Review122026-06-03

Block this in CI

PkgRadar gates github.com/dymensionxyz/optimint (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/dymensionxyz/[email protected]