PkgRadar

Go modules · proxy.golang.org

github.com/get-vix/vix

Remote Payload: matched "curl "

Why PkgRadar flagged v0.5.0

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/get-vix/[email protected]/internal/ui/tabs.go
mediumRemote Payloadmatched "curl " · github.com/get-vix/[email protected]/internal/update/install.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.5.0Review242026-06-16
v0.4.0Low risk02026-06-07
v0.3.7-0.20260603221024-08ce4e39e8deLow risk02026-06-05
v0.3.6Low risk02026-06-05
v0.3.6-0.20260603192628-933b498d5b5bLow risk02026-06-04
v0.1.15Low risk02026-06-04
v0.1.19Low risk02026-06-04
v0.2.1Low risk02026-06-04
v0.2.2Low risk02026-06-04
v0.1.17Low risk02026-06-04
v0.1.22Low risk02026-06-04
v0.1.11Low risk02026-06-04
v0.1.18Low risk02026-06-04
v0.1.8Low risk02026-06-04
v0.1.20Low risk02026-06-04
v0.3.1Low risk02026-06-04
v0.1.14Low risk02026-06-04
v0.3.2Low risk02026-06-04
v0.3.0Low risk02026-06-04

Block this in CI

PkgRadar gates github.com/get-vix/vix (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/get-vix/[email protected]
Start free — 25 scans / moView full evidence