PkgRadar

Go modules · proxy.golang.org

github.com/loft-sh/api/v4

Remote Payload: matched "cURL "

Why PkgRadar flagged v4.10.0-rc.6

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/loft-sh/api/[email protected]/pkg/snapshot/options.go
mediumRemote Payloadmatched "cURL " · github.com/loft-sh/api/[email protected]/pkg/snapshot/storage/s3/store.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v4.10.0-rc.6Review292026-06-17
v4.10.0-rc.5Review292026-06-14
v4.6.4-rc.2Low risk02026-06-13
v4.7.3-rc.2Low risk02026-06-13
v4.9.3-rc.1Low risk02026-06-13
v4.8.3-rc.2Low risk02026-06-13
v4.10.0-rc.4Review292026-06-13
v4.9.2Low risk02026-06-09
v4.9.2-rc.3Low risk02026-06-09
v4.9.2-rc.2Low risk02026-06-05
v4.9.2-rc.1Low risk02026-06-05
v4.10.0-alpha.13Review122026-06-02
v4.0.0-alpha.6.0.20260601092011-d24749593b40Review122026-06-02
v4.10.0-alpha.12Review122026-06-02
v4.11.0-next.1Review122026-05-30
v4.10.0-alpha.9Review122026-05-30
v4.10.0-alpha.10Review122026-05-30
v4.9.1Low risk02026-05-30
v4.9.1-rc.3Low risk02026-05-30

Block this in CI

PkgRadar gates github.com/loft-sh/api/v4 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/loft-sh/api/[email protected]