PkgRadar

Go modules · proxy.golang.org

github.com/looplj/axonhub

Remote Payload: matched "cURL "

Why PkgRadar flagged v0.0.0-20260615043144-d59d59494cd9

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/looplj/[email protected]/internal/server/api/oidc.go
mediumRemote Payloadmatched "cURL " · github.com/looplj/[email protected]/internal/server/config.go
mediumRemote Payloadmatched "cURL " · github.com/looplj/[email protected]/internal/server/server.go
mediumGo Mod Replace Localgo.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · github.com/looplj/[email protected]/go.mod

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260615043144-d59d59494cd9High risk462026-06-16
v0.0.0-20260614145446-d1d9779b762aHigh risk462026-06-15
v0.0.0-20260614142921-686727169b7dHigh risk462026-06-15
v0.0.0-20260614111114-33ad6fe93cd6High risk462026-06-15
v1.0.0-beta3.0.20260613041938-18aeef7cc21aHigh risk462026-06-15
v0.0.0-20260613093854-e260e0b45306High risk462026-06-14
v0.0.0-20260613041938-18aeef7cc21aHigh risk462026-06-14
v0.0.0-20260611162222-a88c652a7045High risk462026-06-12
v0.0.0-20260610162124-21284f2eff94High risk462026-06-11
v0.0.0-20260610143406-e5be62126293High risk462026-06-11
v1.0.0-beta2.0.20260610002923-0c7490088ef1High risk462026-06-11
v0.0.0-20260610002923-0c7490088ef1High risk462026-06-11
v0.0.0-20260608161606-c3bb25b35a5fHigh risk462026-06-09
v0.0.0-20260604153619-ad096f571027High risk462026-06-05
v0.0.0-20260604152216-28adad0ac550High risk462026-06-05
v0.0.0-20260604140119-78d72aa9bc38High risk462026-06-05
v0.0.0-20260603145651-be5523c61dcaHigh risk462026-06-04
v1.0.0-beta2High risk462026-06-03
v0.0.0-20260602085739-974b28f54cb4High risk462026-06-03
v0.0.0-20260602054907-23b062cf877cHigh risk462026-06-03
v0.0.0-20260601140055-c6ee88fd1d74High risk462026-06-03
v1.0.0-beta1.0.20260530030659-88d2a59d9b84High risk462026-06-01
v0.0.0-20260530030659-88d2a59d9b84Review462026-05-31
v0.0.0-20260528180125-a240989163abReview462026-05-29

Block this in CI

PkgRadar gates github.com/looplj/axonhub (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/looplj/[email protected]
Start free — 25 scans / moView full evidence