PkgRadar

Go modules · proxy.golang.org

github.com/luci/luci-go

Remote Payload: matched "cUrl "

Why PkgRadar flagged v0.0.0-20260612030249-83247f33584d

SeveritySignalEvidence
mediumRemote Payloadmatched "cUrl " · github.com/luci/[email protected]/common/proto/options.pb.go
mediumRemote Payloadmatched "cURL " · github.com/luci/[email protected]/lucicfg/output.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260612030249-83247f33584dReview242026-06-13
v0.0.0-20260611234514-8bb8ac23abccReview242026-06-13
v0.0.0-20260611172101-2fcddbd4fe23Review242026-06-12
v0.0.0-20260611051110-899e7fed55abReview242026-06-12
v0.0.0-20260611020707-0c5de85bd807Review242026-06-12
v0.0.0-20260610161309-19670d7b024eReview242026-06-11
v0.0.0-20260610105503-5d505887c0b5Review242026-06-11
v0.0.0-20260609231106-d46a3fd8db30Review242026-06-10
v0.0.0-20260609230743-fe8cb51daea0Review242026-06-10
v0.0.0-20260609093042-c4238ad30905Review242026-06-10
v0.0.0-20260608040953-16037e4887ecReview242026-06-09
v0.0.0-20260606230142-e0d82cca3bfbReview242026-06-08
v0.0.0-20260606005133-e4d9724bfe2dReview242026-06-07
v0.0.0-20260605224849-2d4f30d05ed4Review242026-06-06
v0.0.0-20260605192549-8d45e64ad880Review242026-06-06
v0.0.0-20260605030743-010616721322Review242026-06-06
v0.0.0-20260604183144-400a5823f9b4Review242026-06-05
v0.0.0-20260604080008-a35edfd8f09bReview242026-06-05
v0.0.0-20260604043343-ffe247d73ec7Review242026-06-05
v0.0.0-20260603232842-ffe52f68b70eReview242026-06-05
v0.0.0-20260602235355-6d2033867416Review242026-06-04
v0.0.0-20260602180942-a21c404ffe52Review242026-06-03
v0.0.0-20260602150020-6a3248288e3fReview242026-06-03
v0.0.0-20260602042059-390874dbb7dcReview242026-06-03
v0.0.0-20260601214409-b89ca454f282Review242026-06-02
v0.0.0-20260601074453-47b5f7799340Review242026-06-02
v0.0.0-20260601010651-41c583702256Review242026-06-02
v0.0.0-20260529234713-0648107547f8Review242026-05-31
v0.0.0-20260529201200-342df9a4782aReview242026-05-30
v0.0.0-20260528095833-ab05387c15aeReview242026-05-30
v0.0.0-20260528090338-110371f57d82Review242026-05-30
v0.0.0-20260528231928-35943cc7759dReview242026-05-29
v0.0.0-20260528172828-ecb3ba36b415Review242026-05-29

Block this in CI

PkgRadar gates github.com/luci/luci-go (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/luci/[email protected]