PkgRadar

Go modules · proxy.golang.org

github.com/ialexeze/orkestra

Remote Payload: matched "github.com/orkspace/orkestra/releases/download"

Why PkgRadar flagged v0.7.5

SeveritySignalEvidence
mediumRemote Payloadmatched "github.com/orkspace/orkestra/releases/download" · github.com/ialexeze/[email protected]/cmd/cli/init_helper.go
mediumRemote Payloadmatched "github.com/orkspace/orkestra/releases/download" · github.com/ialexeze/[email protected]/cmd/cli/upgrade.go
mediumRemote Payloadmatched "cURL " · github.com/ialexeze/[email protected]/pkg/merger/registry.go
mediumRemote Payloadmatched "curl " · github.com/ialexeze/[email protected]/pkg/ork/deps.go
mediumRemote Payloadmatched "github.com/kubernetes-sigs/kind/releases/download" · github.com/ialexeze/[email protected]/pkg/ork/kind.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.7.5High risk652026-06-11
v0.7.4High risk652026-06-11
v0.7.3High risk652026-06-11
v0.7.2High risk652026-06-06
v0.7.0High risk652026-06-06
v0.6.6High risk652026-06-06
v0.6.5High risk652026-06-06
v0.6.4High risk652026-06-06
v0.6.3High risk652026-06-06
v0.6.2High risk652026-06-06
v0.7.2-0.20260605002244-db74adaa93e1High risk652026-06-06
v0.7.1High risk652026-06-06
v0.6.0Review652026-05-30
v0.6.0-alpha.1High risk772026-05-30
v0.5.4High risk772026-05-30
v0.6.1Review652026-05-30

Block this in CI

PkgRadar gates github.com/ialexeze/orkestra (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/ialexeze/[email protected]
Start free — 25 scans / moView full evidence