Go modules · proxy.golang.org
github.com/l3montree-dev/flawfix
Remote Payload: matched "raw.githubusercontent.com"
Why PkgRadar flagged v1.6.0
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "raw.githubusercontent.com" · github.com/l3montree-dev/[email protected]/cmd/devguard-cli/commands/licenses.go |
| medium | Remote Payload | matched "curl " · github.com/l3montree-dev/[email protected]/cmd/devguard-scanner/commands/curl.go |
| medium | Remote Payload | matched "raw.githubusercontent.com" · github.com/l3montree-dev/[email protected]/cmd/devguard-scanner/commands/kyverno2sarif.go |
| medium | Remote Payload | matched "raw.githubusercontent.com" · github.com/l3montree-dev/[email protected]/controllers/first_party_vuln_controller.go |
| medium | Remote Payload | matched "raw.githubusercontent.com" · github.com/l3montree-dev/[email protected]/controllers/scan_controller.go |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v1.6.0 | High risk | 63 | 2026-06-17 |
v1.5.1 | Review | 51 | 2026-05-29 |
v1.5.0 | Review | 51 | 2026-05-29 |
Block this in CI
pkgradar gate --ecosystem go github.com/l3montree-dev/[email protected]