PkgRadar

Go modules · proxy.golang.org

github.com/larksuite/cli

Remote Payload: matched "cUrl "

Why PkgRadar flagged v1.0.46

SeveritySignalEvidence
mediumRemote Payloadmatched "cUrl " · github.com/larksuite/[email protected]/cmd/schema/schema.go
mediumRemote Payloadmatched "cURL " · github.com/larksuite/[email protected]/internal/schema/assembler.go
mediumRemote Payloadmatched "cURL " · github.com/larksuite/[email protected]/internal/schema/lint.go
mediumRemote Payloadmatched "cURL " · github.com/larksuite/[email protected]/internal/schema/types.go
mediumRemote Payloadmatched "wGet " · github.com/larksuite/[email protected]/shortcuts/base/view_get.go
mediumRemote Payloadmatched "wGet " · github.com/larksuite/[email protected]/shortcuts/base/workflow_get.go
mediumRemote Payloadmatched "cURL " · github.com/larksuite/[email protected]/shortcuts/doc/docs_create.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.0.46High risk942026-06-03
v1.0.46-0.20260602094945-0aa9e96d18c5High risk942026-06-03
v1.0.46-0.20260602120150-5ec690117d02High risk942026-06-03
v1.0.46-0.20260602030853-bc8e9bd6ef46High risk942026-06-03
v1.0.45High risk942026-06-02
v1.0.45-0.20260601084718-0bdd7de8077dHigh risk942026-06-02
v1.0.32-0.20260515083500-11b8a7c7573cHigh risk482026-06-02
v1.0.43Review942026-05-29

Block this in CI

PkgRadar gates github.com/larksuite/cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/larksuite/[email protected]
Start free — 25 scans / moView full evidence