PkgRadar

Go modules · proxy.golang.org

github.com/pardnchiu/go-skill-runner

Remote Payload: matched "curl "

Why PkgRadar flagged v0.26.9

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/pardnchiu/[email protected]/cmd/app/main.go
mediumRemote Payloadmatched "curl " · github.com/pardnchiu/[email protected]/internal/runtime/tui/commandKuradb.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.26.9Review272026-06-12
v0.26.8Review272026-06-10
v0.26.7Review272026-06-09
v0.26.5Review272026-06-09
v0.26.4Review272026-06-07
v0.26.3Review272026-06-07
v0.26.0Review272026-06-06
v0.26.1Review272026-06-06
v0.26.2Review272026-06-06
v0.25.12Review272026-06-04
v0.25.13Review272026-06-04
v0.25.8Review272026-06-02
v0.25.5Review272026-06-01
v0.25.6Review272026-06-01
v0.25.0Review272026-05-30
v0.25.1Review272026-05-30
v0.24.17Review272026-05-29

Block this in CI

PkgRadar gates github.com/pardnchiu/go-skill-runner (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/pardnchiu/[email protected]