PkgRadar

Go modules · proxy.golang.org

github.com/google/Go-github/v39

Remote Payload: matched "cURL "

Why PkgRadar flagged v39.0.0

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/google/go-github/[email protected]/github/activity.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v39.0.0Review122026-06-01
v39.1.0Review122026-06-01
v39.2.0Review122026-06-01

Block this in CI

PkgRadar gates github.com/google/Go-github/v39 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/google/Go-github/[email protected]