PkgRadar

Go modules · proxy.golang.org

github.com/inference-gateway/cli

Remote Payload: matched "curl "

Why PkgRadar flagged v0.121.2-0.20260611191013-8df84e7b387a

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/inference-gateway/[email protected]/internal/services/gateway_manager.go
mediumRemote Payloadmatched "curl " · github.com/inference-gateway/[email protected]/internal/services/mcp_manager.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/inference-gateway/[email protected]/internal/services/skills/install.go
mediumRemote Payloadmatched "curl " · github.com/inference-gateway/[email protected]/internal/web/remote_installer.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.121.2-0.20260611191013-8df84e7b387aHigh risk612026-06-13
v0.121.1High risk612026-06-13
v0.121.0High risk612026-06-11
v0.117.2-0.20260602215034-90ddcf30521eHigh risk612026-06-04
v0.116.0High risk582026-06-04
v0.117.0High risk612026-06-04
v0.117.1High risk612026-06-04
v0.115.2High risk582026-06-01
v0.115.1Review582026-05-30
v0.114.0Review582026-05-30
v0.113.1-0.20260529012358-36a44a86b110Review582026-05-30
v0.113.0Review582026-05-30
v0.112.3Review582026-05-30

Block this in CI

PkgRadar gates github.com/inference-gateway/cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/inference-gateway/[email protected]
Start free — 25 scans / moView full evidence