PkgRadar

Go modules · proxy.golang.org

github.com/inngest/inngest-cli

Remote Payload: matched "cURL "

Why PkgRadar flagged v1.26.0

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/inngest/[email protected]/pkg/connect/grpc/client.go
mediumRemote Payloadmatched "cURL " · github.com/inngest/[email protected]/pkg/connect/rest/v0/workerapi.go
mediumRemote Payloadmatched "cURL " · github.com/inngest/[email protected]/pkg/connect/service.go
mediumRemote Payloadmatched "curl " · github.com/inngest/[email protected]/pkg/update/detect.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.26.0High risk482026-06-07
v1.25.1-0.20260604205705-88313dbc565fHigh risk482026-06-06
v1.25.0High risk482026-06-06
v1.24.0High risk482026-06-03
v1.23.0Review482026-05-30

Block this in CI

PkgRadar gates github.com/inngest/inngest-cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/inngest/[email protected]
Start free — 25 scans / moView full evidence