PkgRadar

Go modules · proxy.golang.org

github.com/kreuzberg-dev/liter-llm

Remote Payload: matched "curl "

Why PkgRadar flagged v1.4.0-rc.39.0.20260528075424-0f2cc5e9f1d9

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/kreuzberg-dev/[email protected]/e2e/c/download_ffi.sh
mediumRemote Payloadmatched "curl " · github.com/kreuzberg-dev/[email protected]/test_apps/c/download_ffi.sh
mediumRemote Payloadmatched "curl " · github.com/kreuzberg-dev/[email protected]/test_apps/php/install.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.5.1-0.20260608050523-2fe10a68d1d6Low risk02026-06-09
v1.5.0Low risk02026-06-09
v1.4.2-0.20260605171137-480512e7d1dcLow risk02026-06-06
v1.4.1Low risk02026-06-06
v1.4.0Low risk02026-06-06
v1.4.0-rc.61.0.20260605065846-55009f8b19f3Low risk02026-06-06
v1.4.0-rc.58Low risk02026-06-05
v1.4.0-rc.59.0.20260604180024-0ee12111b2afLow risk02026-06-05
v1.4.0-rc.59Low risk02026-06-05
v1.4.0-rc.57Low risk02026-06-05
v1.4.0-rc.55.0.20260604020526-55a04d5040ecLow risk02026-06-05
v1.4.0-rc.55.0.20260603205746-4c786771bfd8Low risk02026-06-04
v1.4.0-rc.53.0.20260603134225-e99b61c0c5a9Low risk02026-06-04
v1.4.0-rc.52.0.20260603103804-38826859c627Low risk02026-06-04
v1.4.0-rc.50.0.20260603044720-420e5d9ecbd2Low risk02026-06-04
v1.4.0-rc.49Low risk02026-06-03
v1.4.0-rc.48.0.20260529162720-edf9718ca5ccLow risk02026-05-30
v1.4.0-rc.44Low risk02026-05-30
v1.4.0-rc.47.0.20260529150955-1ece0b74321dLow risk02026-05-30
v1.4.0-rc.47Low risk02026-05-30
v1.4.0-rc.46.0.20260529100318-4b6e2cb2649fLow risk02026-05-30
v1.4.0-rc.46Low risk02026-05-30
v1.4.0-rc.45.0.20260529064245-3aa115dabf88Low risk02026-05-30
v1.4.0-rc.45Low risk02026-05-30
v1.4.0-rc.41Low risk02026-05-29
v1.4.0-rc.40Low risk02026-05-29
v1.4.0-rc.43Low risk02026-05-29
v1.4.0-rc.42.0.20260528170143-71314f08b521Low risk02026-05-29
v1.4.0-rc.39.0.20260528075424-0f2cc5e9f1d9Review362026-05-29
v1.4.0-rc.39Review362026-05-29

Block this in CI

PkgRadar gates github.com/kreuzberg-dev/liter-llm (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/kreuzberg-dev/[email protected]
Start free — 25 scans / moView full evidence