PkgRadar

Go modules · proxy.golang.org

github.com/fulcrum-governance/boundary

Remote Payload: matched "curl "

Why PkgRadar flagged v0.10.0

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/fulcrum-governance/[email protected]/internal/redteam/edit_packs.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.10.0Review272026-06-12
v0.10.1Review272026-06-12
v0.9.1-0.20260603113733-264d5fce1f40Review272026-06-06
v0.9.0Review272026-06-06
v0.8.1-0.20260602011427-a50280722c77Review272026-06-03
v0.7.1-0.20260601053332-d62dccb041f2Review272026-06-02
v0.6.1Review272026-06-02
v0.6.0Review272026-06-02
v0.5.0Review102026-06-02
v0.7.0Review272026-06-02
v0.4.1-0.20260528000357-33d31bb89dadReview102026-05-30
v0.4.0Review102026-05-30

Block this in CI

PkgRadar gates github.com/fulcrum-governance/boundary (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/fulcrum-governance/[email protected]
Start free — 25 scans / moView full evidence