PkgRadar

Go modules · proxy.golang.org

github.com/netapp/harvest/v2

Remote Payload: matched "curl "

Why PkgRadar flagged v2.0.0-20260615060106-ee11c08735b7

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/netapp/harvest/[email protected]/cmd/tools/rest/rest.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v2.0.0-20260615060106-ee11c08735b7Review122026-06-16
v2.0.0-20260612174240-2d91b55965c0Review122026-06-13
v2.0.0-20260612145132-c1efa0be6484Review122026-06-13
v2.0.0-20260610065145-7f02b2bb58c8Review122026-06-11
v2.0.0-20260602104754-edc4c94da8dfReview122026-06-03
v2.0.0-20260601174409-ce518c0499b4Review122026-06-02
v2.0.0-20260601100417-c4e0e83f1fe9Review122026-06-02
v2.0.0-20260601091912-c94f79d09502Review122026-06-02
v2.0.0-20260601050404-2d0561b09b06Review122026-06-02

Block this in CI

PkgRadar gates github.com/netapp/harvest/v2 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/netapp/harvest/[email protected]