PkgRadar

Go modules · proxy.golang.org

github.com/goceleris/celeris

Remote Payload: matched "github.com/summerwind/h2spec/releases/download"

Why PkgRadar flagged v1.4.16-0.20260612132018-7512c15cd341

SeveritySignalEvidence
mediumRemote Payloadmatched "github.com/summerwind/h2spec/releases/download" · github.com/goceleris/[email protected]/magefile.go
mediumRemote Payloadmatched "cURL " · github.com/goceleris/[email protected]/middleware/swagger/swagger.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.4.16-0.20260612132018-7512c15cd341Review242026-06-15
v1.4.15Review242026-06-05
v1.4.14Review242026-06-04
v1.4.13Review242026-06-04
v1.4.13-0.20260603161605-65db7248e3e6Review242026-06-04
v1.4.13-0.20260603153906-b909a5297322Review242026-06-04
v1.4.13-0.20260602114658-503f1784c7b7Review242026-06-03
v1.4.13-0.20260530173521-55d8aa144c96Review242026-06-02
v1.4.13-0.20260601160956-61dddb3d6683Review242026-06-02
v1.4.12Review242026-05-31
v1.4.12-0.20260530163416-ad98ed776418Review242026-05-31
v1.4.12-0.20260530075312-6b7964af3147Review242026-05-31
v1.4.12-0.20260530003821-afe7fb8acf1dReview242026-05-31
v1.4.12-0.20260529231127-85f4d50135d7Review242026-05-30
v1.4.11Review242026-05-29

Block this in CI

PkgRadar gates github.com/goceleris/celeris (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/goceleris/[email protected]