PkgRadar

Go modules · proxy.golang.org

github.com/simple-container-com/api

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged v0.0.0-20260604071945-6a7112ee07a6

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/simple-container-com/[email protected]/pkg/assistant/llm/anthropic.go
mediumRemote Payloadmatched "curl " · github.com/simple-container-com/[email protected]/pkg/assistant/llm/prompts/system.go
mediumRemote Payloadmatched "curl " · github.com/simple-container-com/[email protected]/pkg/security/scan/grype.go
mediumRemote Payloadmatched "curl " · github.com/simple-container-com/[email protected]/pkg/security/scan/trivy.go
mediumRemote Payloadmatched "curl " · github.com/simple-container-com/[email protected]/pkg/security/tools/installer.go
mediumCredential file accessmatched "GOOGLE_APPLICATION_CREDENTIALS" · github.com/simple-container-com/[email protected]/pkg/clouds/pulumi/gcp/gke_autopilot_stack.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260604071945-6a7112ee07a6High risk1152026-06-08

Block this in CI

PkgRadar gates github.com/simple-container-com/api (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/simple-container-com/[email protected]