PkgRadar

Go modules · proxy.golang.org

github.com/pb33f/doctor

Remote Payload: matched "cURL "

Why PkgRadar flagged v0.0.76

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/pb33f/[email protected]/printingpress/api.go
mediumRemote Payloadmatched "curl\n\n" · github.com/pb33f/[email protected]/printingpress/curl/builder.go
mediumRemote Payloadmatched "cURL " · github.com/pb33f/[email protected]/printingpress/press.go
mediumRemote Payloadmatched "cURL " · github.com/pb33f/[email protected]/printingpress/serve/render.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.76High risk482026-06-17
v0.0.77High risk482026-06-17
v0.0.73High risk482026-06-10
v0.0.72High risk482026-06-03
v0.0.70Review482026-05-29
v0.0.69Review482026-05-29

Block this in CI

PkgRadar gates github.com/pb33f/doctor (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/pb33f/[email protected]
Start free — 25 scans / moView full evidence