PkgRadar

Go modules · proxy.golang.org

github.com/kyle-wannacott/wails/v3

Remote Payload: matched "github.com/linuxdeploy/linuxdeploy/releases/download"

Why PkgRadar flagged v3.0.0-alpha.95

SeveritySignalEvidence
mediumRemote Payloadmatched "github.com/linuxdeploy/linuxdeploy/releases/download" · github.com/kyle-wannacott/wails/[email protected]/internal/commands/appimage.go
mediumRemote Payloadmatched "cUrl " · github.com/kyle-wannacott/wails/[email protected]/pkg/application/application_android.go
mediumRemote Payloadmatched "cURL " · github.com/kyle-wannacott/wails/[email protected]/pkg/application/single_instance_darwin_url.go
mediumRemote Payloadmatched "curl " · github.com/kyle-wannacott/wails/[email protected]/pkg/doctor-ng/platform_darwin.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v3.0.0-alpha.50Review242026-06-13
v3.0.0-alpha.20Review122026-06-13
v3.0.0-alpha.1Low risk02026-06-13
v3.0.0-alpha.24Review122026-06-13
v3.0.0-alpha.37Review122026-06-13
v3.0.0-alpha.6Review122026-06-13
v3.0.0-alpha.60Review242026-06-13
v3.0.0-alpha.61Review242026-06-13
v3.0.0-alpha.65Review242026-06-13
v3.0.0-alpha.66Review242026-06-13
v3.0.0-alpha.8Review122026-06-13
v3.0.0-alpha.95High risk482026-06-13
v3.0.0-alpha.42Review122026-06-13
v3.0.0-alpha.16Review122026-06-13
v3.0.0-alpha.40Review122026-06-13
v3.0.0-alpha.22Review122026-06-13
v3.0.0-alpha.55Review242026-06-13
v3.0.0-alpha.7Review122026-06-13
v3.0.0-alpha.99.0.20260612035340-de4d7bd57e1dHigh risk482026-06-13
v3.0.0-alpha.25Review122026-06-13
v3.0.0-alpha.99.0.20260612033929-b295fdaa100dHigh risk482026-06-13
v3.0.0-alpha.29Review122026-06-13
v3.0.0-alpha.99.0.20260612031644-298bae71cbcfHigh risk482026-06-13
v3.0.0-alpha.98-tuiHigh risk482026-06-13

Block this in CI

PkgRadar gates github.com/kyle-wannacott/wails/v3 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/kyle-wannacott/wails/[email protected]