PkgRadar

Go modules · proxy.golang.org

github.com/ialexeze/multi-crd-controller

Remote Payload: matched "github.com/orkspace/orkestra/releases/download"

Why PkgRadar flagged v0.7.4

SeveritySignalEvidence
mediumRemote Payloadmatched "github.com/orkspace/orkestra/releases/download" · github.com/ialexeze/[email protected]/cmd/cli/init_helper.go
mediumRemote Payloadmatched "github.com/orkspace/orkestra/releases/download" · github.com/ialexeze/[email protected]/cmd/cli/upgrade.go
mediumRemote Payloadmatched "cURL " · github.com/ialexeze/[email protected]/pkg/merger/registry.go
mediumRemote Payloadmatched "curl " · github.com/ialexeze/[email protected]/pkg/ork/deps.go
mediumRemote Payloadmatched "github.com/kubernetes-sigs/kind/releases/download" · github.com/ialexeze/[email protected]/pkg/ork/kind.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.7.4High risk652026-06-11
v0.7.4-0.20260607110249-2ce65caab070High risk652026-06-09
v0.7.3High risk652026-06-09
v0.5.3High risk772026-06-06
v0.7.2High risk652026-06-06
v0.6.1High risk652026-06-06
v0.7.2-0.20260605002244-db74adaa93e1High risk652026-06-06
v0.7.1High risk652026-06-06
v0.7.0High risk652026-06-03
v0.6.6High risk652026-06-03
v0.6.6-0.20260602001822-64571a90d188High risk652026-06-03
v0.6.5High risk652026-06-03
v0.6.5-0.20260531230624-c2c0df434cfbHigh risk652026-06-02
v0.6.4High risk652026-06-02
v0.6.2High risk652026-06-01
v0.6.3High risk652026-06-01

Block this in CI

PkgRadar gates github.com/ialexeze/multi-crd-controller (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/ialexeze/[email protected]