PkgRadar

Go modules · proxy.golang.org

github.com/maruel/genai

Remote Payload: matched "cURL "

Why PkgRadar flagged v0.6.2-0.20260615134006-8c2b01076633

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/maruel/[email protected]/providers/cloudflare/client.go
mediumRemote Payloadmatched "github.com/ollama/ollama/releases/download" · github.com/maruel/[email protected]/providers/ollama/ollamasrv/ollamasrv.go
mediumRemote Payloadmatched "cURL " · github.com/maruel/[email protected]/providers/openairesponses/client.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/maruel/[email protected]/smoke/smoke.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.6.2-0.20260615134006-8c2b01076633High risk482026-06-16
v0.6.1High risk482026-06-15
v0.6.0High risk482026-06-08
v0.5.7-0.20260607142039-244d4dd786a7High risk482026-06-08
v0.5.7-0.20260607135114-dc0829c85eb4High risk482026-06-08
v0.5.7-0.20260607131406-f1e3f5426c57High risk482026-06-08
v0.5.5Review482026-05-31

Block this in CI

PkgRadar gates github.com/maruel/genai (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/maruel/[email protected]