PkgRadar

Go modules · proxy.golang.org

github.com/ontogisai/oga-kit-sdk

Remote Payload: matched "cURL "

Why PkgRadar flagged v0.8.0-beta

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/ontogisai/[email protected]/gateway/client.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.8.0-betaReview122026-06-05
v0.7.0-betaLow risk02026-06-05
v0.6.0-betaLow risk02026-06-04
v0.5.1-beta.0.20260603135004-2985767c11adLow risk02026-06-04
v0.5.0-betaLow risk02026-06-02
v0.5.1-betaLow risk02026-06-02
v0.4.0-betaLow risk02026-06-01
v0.3.0-betaLow risk02026-06-01
v0.2.0-beta.0.20260530172651-442e9852e6c6Low risk02026-05-31
v0.2.0-betaLow risk02026-05-31
v0.1.0-beta.0.20260528153127-27b093557de2Low risk02026-05-29
v0.1.0-betaLow risk02026-05-29

Block this in CI

PkgRadar gates github.com/ontogisai/oga-kit-sdk (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/ontogisai/[email protected]
Start free — 25 scans / moView full evidence