PkgRadar

Go modules · proxy.golang.org

github.com/layer-3/clearnet-sdk

Remote Payload: matched "cURL "

Why PkgRadar flagged v0.1.2-0.20260619104305-df7d8b945acb

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/layer-3/[email protected]/pkg/blockchain/sol/depositor.go
mediumRemote Payloadmatched "cURL " · github.com/layer-3/[email protected]/pkg/blockchain/sol/rotation_finalizer.go
mediumRemote Payloadmatched "cURL " · github.com/layer-3/[email protected]/pkg/blockchain/sol/withdrawal_finalizer.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.1.2-0.20260619104305-df7d8b945acbReview242026-06-20
v0.1.2-0.20260619094951-56e8121c5574Review242026-06-20
v0.1.1Review242026-06-19

Block this in CI

PkgRadar gates github.com/layer-3/clearnet-sdk (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/layer-3/[email protected]
github.com/layer-3/clearnet-sdk — Go modules security scan | PkgRadar