PkgRadar

Go modules · proxy.golang.org

github.com/giantswarm/muster

Remote Payload: matched "cURL "

Why PkgRadar flagged v0.1.226

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/giantswarm/[email protected]/internal/app/config.go
mediumRemote Payloadmatched "cURL " · github.com/giantswarm/[email protected]/internal/app/services.go
mediumRemote Payloadmatched "cURL " · github.com/giantswarm/[email protected]/internal/oauth/client.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.1.226High risk362026-06-03
v0.1.227High risk362026-06-03
v0.1.235High risk362026-06-03
v0.1.232High risk362026-06-03
v0.1.233High risk362026-06-03
v0.1.228High risk362026-06-03
v0.1.234High risk362026-06-03
v0.1.224High risk362026-06-03
v0.1.221High risk362026-06-01
v0.1.222High risk362026-05-31
v0.1.213High risk362026-05-30
v0.1.205High risk362026-05-30
v0.1.210High risk362026-05-30
v0.1.209High risk362026-05-30
v0.1.219Review362026-05-30
v0.1.215Review362026-05-29
v0.1.214Review362026-05-29
v0.1.217Review362026-05-29
v0.1.216Review362026-05-29

Block this in CI

PkgRadar gates github.com/giantswarm/muster (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/giantswarm/[email protected]
Start free — 25 scans / moView full evidence