PkgRadar

Go modules · proxy.golang.org

github.com/k2-fsa/sherpa-onnx/go-api-examples/speech-enhancement-gtcrn

Remote Payload: matched "curl "

Why PkgRadar flagged v0.0.0-20260527015336-4bc9d4cb7c2c

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/k2-fsa/sherpa-onnx/go-api-examples/[email protected]/run.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260612065247-b74c4dfee9b4Low risk02026-06-13
v0.0.0-20260608105248-e25292f7a1c4Low risk02026-06-10
v0.0.0-20260606033125-6a9965eedff9Low risk02026-06-08
v0.0.0-20260604103321-6abe9990be1aLow risk02026-06-05
v0.0.0-20260601033053-6f91acc3693cLow risk02026-06-03
v0.0.0-20260529103133-a519369110c4Low risk02026-05-31
v0.0.0-20260527015336-4bc9d4cb7c2cReview122026-05-29

Block this in CI

PkgRadar gates github.com/k2-fsa/sherpa-onnx/go-api-examples/speech-enhancement-gtcrn (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/k2-fsa/sherpa-onnx/go-api-examples/[email protected]