PkgRadar

Go modules · proxy.golang.org

github.com/inngest/inngestctl

Remote Payload: matched "cURL "

Why PkgRadar flagged v1.27.1-0.20260609235158-24c55b8bd315

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/inngest/[email protected]/pkg/connect/grpc/client.go
mediumRemote Payloadmatched "cURL " · github.com/inngest/[email protected]/pkg/connect/rest/v0/workerapi.go
mediumRemote Payloadmatched "cURL " · github.com/inngest/[email protected]/pkg/connect/service.go
mediumRemote Payloadmatched "curl " · github.com/inngest/[email protected]/pkg/update/detect.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.27.1-0.20260609235158-24c55b8bd315High risk482026-06-11
v1.26.0High risk482026-06-07
v1.25.0High risk482026-06-05
v1.24.1-0.20260602074606-9eb367a240d8High risk482026-06-03
v1.24.0High risk482026-06-03
v1.23.1-0.20260529175136-cb71dd9ded8cHigh risk482026-05-31
v1.23.0High risk482026-05-31

Block this in CI

PkgRadar gates github.com/inngest/inngestctl (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/inngest/[email protected]
Start free — 25 scans / moView full evidence