PkgRadar

Go modules · proxy.golang.org

github.com/felixl256/go-stellar-sdk

Remote Payload: matched "curl "

Why PkgRadar flagged v0.6.1-0.20260619085442-8c1d885126d2

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/felixl256/[email protected]/go.mod
mediumRemote Payloadmatched "curl " · github.com/felixl256/[email protected]/go.sum
mediumRemote Payloadmatched "curl " · github.com/felixl256/[email protected]/ingest/ledgerbackend/toml.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.6.1-0.20260619085442-8c1d885126d2Review242026-06-20
v0.5.0Review242026-06-20
v0.4.0Review242026-06-20
v0.3.0Review242026-06-20
v0.1.0Review242026-06-20
v0.6.1-0.20260618191317-308407eca8c6Review242026-06-20
v0.6.0Review242026-06-20
v0.2.0Review242026-06-20
v0.6.0-closetimeReview242026-06-20

Block this in CI

PkgRadar gates github.com/felixl256/go-stellar-sdk (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/felixl256/[email protected]