PkgRadar

Go modules · proxy.golang.org

github.com/smart-mcp-proxy/mcpproxy-go

Remote Payload: matched "cURL "

Why PkgRadar flagged v0.39.0

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/smart-mcp-proxy/[email protected]/cmd/mcpproxy/doctor_cmd.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/smart-mcp-proxy/[email protected]/cmd/mcpproxy/security_cmd.go
mediumRemote Payloadmatched "curl " · github.com/smart-mcp-proxy/[email protected]/internal/diagnostics/registry.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.39.0High risk732026-06-17
v0.39.0-rc.9.0.20260615163358-5a2ef3191b53High risk732026-06-16
v0.39.0-rc.9High risk732026-06-16
v0.39.0-rc.8.0.20260615125005-b8f0d863315eHigh risk732026-06-16
v0.39.0-rc.8High risk732026-06-16
v0.39.0-rc.7.0.20260615095028-e0344377ba74High risk732026-06-16
v0.39.0-rc.3High risk682026-06-16
v0.39.0-rc.7High risk732026-06-16
v0.39.0-rc.5High risk732026-06-16
v0.39.0-rc.4High risk682026-06-16
v0.39.0-rc.2High risk682026-06-12
v0.38.0-rc.1High risk682026-06-09
v0.38.1High risk682026-06-08
v0.38.0High risk682026-06-07
v0.37.1-0.20260604171601-0d998b0839f5High risk682026-06-05
v0.37.0-rc.1High risk682026-06-05
v0.37.0High risk682026-06-05
v0.36.0High risk682026-06-04
v0.34.0Review772026-05-31

Block this in CI

PkgRadar gates github.com/smart-mcp-proxy/mcpproxy-go (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/smart-mcp-proxy/[email protected]
Start free — 25 scans / moView full evidence