PkgRadar

Go modules · proxy.golang.org

github.com/kubewharf/katalyst-core

Remote Payload: matched "cURL "

Why PkgRadar flagged v0.5.49

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/kubewharf/[email protected]/pkg/custom-metric/collector/prometheus/scrape.go
mediumRemote Payloadmatched "cURL " · github.com/kubewharf/[email protected]/pkg/custom-metric/store/remote/sharding.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.5.49Review242026-06-11
v0.5.49-0.20260610135839-ad7ea7260bcdReview242026-06-11
v0.5.49-0.20260610095652-fc947adc7227Review242026-06-11
v0.5.49-0.20260610065239-2f603f913979Review242026-06-11
v0.5.49-0.20260610023622-0f3249c8b7b8Review242026-06-11
v0.5.49-0.20260609130834-a8e8565d74eeReview242026-06-10
v0.5.49-0.20260604125554-f1d186b7fc59Review242026-06-09
v0.5.49-0.20260604021409-477be049e0f7Review242026-06-05
v0.5.49-0.20260603073433-5146cafe38abReview242026-06-04
v0.5.48Review242026-06-03
v0.5.48-0.20260528034116-002067c8c0e8Review242026-05-30
v0.5.48-0.20260529133938-d301709f97beReview242026-05-30

Block this in CI

PkgRadar gates github.com/kubewharf/katalyst-core (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/kubewharf/[email protected]