PkgRadar

Go modules · proxy.golang.org

github.com/gosuda/x402-facilitator

Remote Payload: matched "cUrl "

Why PkgRadar flagged v0.0.4

SeveritySignalEvidence
mediumRemote Payloadmatched "cUrl " · github.com/gosuda/[email protected]/facilitator/iface.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.4Review122026-06-07
v0.0.4-0.20260606123712-57fd2ff450e8Review122026-06-07
v0.0.3Review122026-06-05
v0.0.3-0.20260604061634-d3d61cf24500Review122026-06-05
v0.0.3-0.20260604031337-6baece37375aReview122026-06-05
v0.0.3-0.20260603155321-961de877de3dReview122026-06-04
v0.0.3-0.20260603135023-97ea07a6ccd6Review122026-06-04
v0.0.1Review122026-06-01
v0.0.1-0.20260529090042-02686964a365Review122026-06-01
v0.0.0Review122026-05-30

Block this in CI

PkgRadar gates github.com/gosuda/x402-facilitator (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/gosuda/[email protected]
github.com/gosuda/x402-facilitator — Go modules security scan | PkgRadar