PkgRadar

Go modules · proxy.golang.org

github.com/posit-dev/ptd/lib

Remote Payload: matched "cURL "

Why PkgRadar flagged v0.0.0-20260613121434-b1e68b089777

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/posit-dev/ptd/[email protected]/steps/clusters_aws.go
mediumCredential file accessmatched ".ssh/" · github.com/posit-dev/ptd/[email protected]/aws/proxy.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260613121434-b1e68b089777Review272026-06-17
v0.0.0-20260602164504-1f8f385c3628Review272026-06-03
v0.0.0-20260530142518-42d675acd78eReview272026-06-01
v0.0.0-20260526175812-c39314ffd931Review272026-05-29

Block this in CI

PkgRadar gates github.com/posit-dev/ptd/lib (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/posit-dev/ptd/[email protected]