Go modules · proxy.golang.org
github.com/knowns-dev/knowns
Remote Payload: matched "curl "
Why PkgRadar flagged v0.22.2
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "curl " · github.com/knowns-dev/[email protected]/internal/cli/download_setup_opencode.go |
| medium | Remote Payload | matched "curl " · github.com/knowns-dev/[email protected]/internal/cli/update.go |
| medium | Remote Payload | matched "github.com/clangd/clangd/releases/download" · github.com/knowns-dev/[email protected]/internal/lsp/adapters/cpp.go |
| medium | Remote Payload | matched "curl " · github.com/knowns-dev/[email protected]/internal/tunnel/cloudflared/daemon.go |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v0.22.2 | High risk | 48 | 2026-05-31 |
v0.23.0 | High risk | 36 | 2026-05-31 |
Block this in CI
pkgradar gate --ecosystem go github.com/knowns-dev/[email protected]