PkgRadar

Go modules · proxy.golang.org

github.com/namespacelabs/foundation

Remote Payload: matched "curl "

Why PkgRadar flagged v0.0.517

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/namespacelabs/[email protected]/framework/planning/render/networkplanutils.go
mediumRemote Payloadmatched "curl " · github.com/namespacelabs/[email protected]/internal/cli/cmd/devbox/cmd.go
mediumRemote Payloadmatched "curl " · github.com/namespacelabs/[email protected]/internal/cli/cmd/tools/grpcurl.go
mediumRemote Payloadmatched "curl " · github.com/namespacelabs/[email protected]/internal/debugshell/image.go
mediumRemote Payloadmatched "curl " · github.com/namespacelabs/[email protected]/internal/planning/deploy/storage/output.go
mediumRemote Payloadmatched "cUrl " · github.com/namespacelabs/[email protected]/internal/providers/nscloud/api/types.go
mediumRemote Payloadmatched "github.com/moby/buildkit/releases/download" · github.com/namespacelabs/[email protected]/internal/sdk/buildctl/buildctl.go
mediumRemote Payloadmatched "curl\n\n" · github.com/namespacelabs/[email protected]/internal/sdk/grpcurl/grpcurl.go
mediumRemote Payloadmatched "github.com/rancher/k3d/releases/download" · github.com/namespacelabs/[email protected]/internal/sdk/k3d/k3d.go
mediumRemote Payloadmatched "github.com/chainguard-dev/melange/releases/download" · github.com/namespacelabs/[email protected]/internal/sdk/melange/melange.go
mediumRemote Payloadmatched "cUrl " · github.com/namespacelabs/[email protected]/library/oss/localstack/prepare/bucket/main.go
mediumRemote Payloadmatched "cUrl " · github.com/namespacelabs/[email protected]/library/oss/minio/prepare/main.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.517High risk1102026-06-04
v0.0.518High risk1102026-06-04
v0.0.519High risk1102026-06-04

Block this in CI

PkgRadar gates github.com/namespacelabs/foundation (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/namespacelabs/[email protected]