PkgRadar

Go modules · proxy.golang.org

github.com/status-im/status-go

Go Generate Shell: //go:generate directive shells out to curl/wget/bash — runs during `go generate`.

Why PkgRadar flagged v1.0.1-0.20250822124258-9b8f35014eb8

SeveritySignalEvidence
mediumGo Generate Shell//go:generate directive shells out to curl/wget/bash — runs during `go generate`. · github.com/status-im/[email protected]/pkg/sentry/params.go
mediumGo Generate Shell//go:generate directive shells out to curl/wget/bash — runs during `go generate`. · github.com/status-im/[email protected]/pkg/version/version.go
mediumRemote Payloadmatched "CURL " · github.com/status-im/[email protected]/params/network_config.go
mediumRemote Payloadmatched "CURL " · github.com/status-im/[email protected]/rpc/network/db/utils.go
mediumRemote Payloadmatched "cURL " · github.com/status-im/[email protected]/services/wallet/api.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/status-im/[email protected]/services/wallet/thirdparty/decoder/fourbytegithub/client.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/status-im/[email protected]/services/wallet/token/token-lists/default-lists/aave.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/status-im/[email protected]/services/wallet/token/token-lists/default-lists/tokens_sources.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/status-im/[email protected]/services/wallet/token/token-lists/default-lists/uniswap.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/status-im/[email protected]/services/wallet/token/token-lists/fetcher/constants.go
mediumRemote Payloadmatched "raw.githubusercontent.com" · github.com/status-im/[email protected]/services/wallet/token/token-lists/fetcher/fetcher_test_data.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.0.1-0.20250822124258-9b8f35014eb8High risk1162026-06-14
v0.185.1-0.20250822124258-9b8f35014eb8High risk1162026-06-14
v1.1.1-0.20260612145414-ecf7ad0d8b50High risk932026-06-14

Block this in CI

PkgRadar gates github.com/status-im/status-go (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/status-im/[email protected]