PkgRadar

Go modules · proxy.golang.org

github.com/project-kessel/inventory-api

Remote Payload: matched "cUrl "

Why PkgRadar flagged v0.0.0-20260612135021-272ab0b0d7da

SeveritySignalEvidence
mediumRemote Payloadmatched "cUrl " · github.com/project-kessel/[email protected]/internal/server/options.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260612135021-272ab0b0d7daReview122026-06-13
v0.0.0-20260610180221-9152e15f4bbbReview122026-06-11
v0.0.0-20260604193927-de994c5a106bReview122026-06-05
v0.0.0-20260604072753-bc16e415934cReview122026-06-05
v0.0.0-20260603152151-d508efff17faReview122026-06-04
v0.0.0-20260602195559-3244a0e5c52dReview122026-06-03
v0.0.0-20260529134008-caf562a3fbf0Review122026-05-30
v0.0.0-20260528154047-42dc02296e1eReview122026-05-29

Block this in CI

PkgRadar gates github.com/project-kessel/inventory-api (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/project-kessel/[email protected]