PkgRadar

Go modules · proxy.golang.org

github.com/jfrog/jfrog-client-go

Remote Payload: matched "cUrl "

Why PkgRadar flagged v1.55.1-0.20260528115006-6ca9682a3255

SeveritySignalEvidence
mediumRemote Payloadmatched "cUrl " · github.com/jfrog/[email protected]/tests/utils_test.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.20.1-0.20210307132208-42197d207767Low risk02026-06-10
v0.0.0-20200416132552-d084d203641cLow risk02026-06-06
v0.0.0-20200413132154-335111ab2469Low risk02026-06-06
v0.4.1-0.20190708132318-7f44c86cd726Low risk02026-06-05
v1.55.1-0.20260528115006-6ca9682a3255Review122026-05-29

Block this in CI

PkgRadar gates github.com/jfrog/jfrog-client-go (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/jfrog/[email protected]
github.com/jfrog/jfrog-client-go — Go modules security scan | PkgRadar