PkgRadar

Go modules · proxy.golang.org

github.com/ruvnet/claude-flow

Remote Payload: matched "curl "

Why PkgRadar flagged v3.10.5-0.20260528033306-cea20282d751+incompatible

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/ruvnet/[email protected]+incompatible/v3/@claude-flow/cli/cloud-functions/publish-registry/deploy.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
v3.10.33+incompatibleLow risk02026-06-16
v3.10.41+incompatibleLow risk02026-06-16
v3.10.45+incompatibleLow risk02026-06-16
v3.10.40+incompatibleLow risk02026-06-16
v3.10.42+incompatibleLow risk02026-06-16
v3.10.44+incompatibleLow risk02026-06-16
v3.10.38+incompatibleLow risk02026-06-16
v3.10.43+incompatibleLow risk02026-06-16
v3.10.47-0.20260614075457-28c81c03e3e8+incompatibleLow risk02026-06-15
v3.10.39+incompatibleLow risk02026-06-15
v3.10.46+incompatibleLow risk02026-06-15
v3.10.35-0.20260604131230-d065b15927c6+incompatibleLow risk02026-06-07
v3.10.34+incompatibleLow risk02026-06-07
v3.10.30+incompatibleLow risk02026-06-01
v3.10.29+incompatibleLow risk02026-06-01
v3.10.28+incompatibleLow risk02026-06-01
v3.10.27+incompatibleLow risk02026-06-01
v3.10.26+incompatibleLow risk02026-06-01
v3.10.25+incompatibleLow risk02026-06-01
v3.10.24+incompatibleLow risk02026-06-01
v3.10.22+incompatibleLow risk02026-06-01
v3.10.21+incompatibleLow risk02026-06-01
v3.10.20+incompatibleLow risk02026-06-01
v3.10.19+incompatibleLow risk02026-06-01
v3.10.18+incompatibleLow risk02026-06-01
v3.10.17+incompatibleLow risk02026-06-01
v3.10.16+incompatibleLow risk02026-06-01
v3.10.15+incompatibleLow risk02026-06-01
v3.10.14+incompatibleLow risk02026-06-01
v3.10.23+incompatibleLow risk02026-06-01
v3.10.31+incompatibleLow risk02026-06-01
v3.10.11+incompatibleLow risk02026-05-31
v3.7.0-alpha.71+incompatibleLow risk02026-05-30
v3.9.0+incompatibleLow risk02026-05-30
v3.10.8+incompatibleLow risk02026-05-30
v3.10.7+incompatibleLow risk02026-05-30
v3.10.6+incompatibleLow risk02026-05-30
v3.10.6-0.20260529010533-b8a49cfb82ff+incompatibleLow risk02026-05-30
v3.10.5+incompatibleLow risk02026-05-30
v3.10.5-0.20260528033306-cea20282d751+incompatibleReview122026-05-29
v3.10.4+incompatibleReview122026-05-29

Block this in CI

PkgRadar gates github.com/ruvnet/claude-flow (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/ruvnet/[email protected]+incompatible
Start free — 25 scans / moView full evidence