PkgRadar

Go modules · proxy.golang.org

github.com/mondoohq/mql/providers/k8s

Remote Payload: matched "curl "

Why PkgRadar flagged v0.0.0-20260606191126-c8880f1a05d5

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/mondoohq/mql/providers/[email protected]/go.mod
mediumRemote Payloadmatched "curl " · github.com/mondoohq/mql/providers/[email protected]/go.sum
mediumGo Mod Replace Localgo.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · github.com/mondoohq/mql/providers/[email protected]/go.mod

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260606191126-c8880f1a05d5Review342026-06-07
v0.0.0-20260604204742-9ab1546fed7fReview342026-06-05
v0.0.0-20260604202214-4d42fd5b20e0Review342026-06-05
v0.0.0-20260604194314-abcc4d91e708Review342026-06-05
v0.0.0-20260604083210-a6e7efb26ebbReview342026-06-05
v0.0.0-20260604070754-0c29a52a435eReview342026-06-05
v0.0.0-20260603023616-6f5044a4c235Review342026-06-04
v0.0.0-20260602083659-9d31f3e453f6Review342026-06-03
v0.0.0-20260601215933-8ef790a5c3a8Review342026-06-02
v0.0.0-20260601213738-8a1509efa89aReview342026-06-02
v0.0.0-20260601211017-68f352e85accReview342026-06-02
v0.0.0-20260601203715-43a92883d501Review342026-06-02
v0.0.0-20260601190514-fa0c1b8e97ebReview342026-06-02
v0.0.0-20260601180745-b60c88dba08eReview342026-06-02
v0.0.0-20260529101249-d69f3f4e0de3Review342026-05-31

Block this in CI

PkgRadar gates github.com/mondoohq/mql/providers/k8s (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/mondoohq/mql/providers/[email protected]