PkgRadar

Go modules · proxy.golang.org

github.com/stellar/go-stellar-sdk

Remote Payload: matched "curl "

Why PkgRadar flagged v0.5.1-0.20260605220916-532e2b5144d4

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/stellar/[email protected]/go.mod
mediumRemote Payloadmatched "curl " · github.com/stellar/[email protected]/go.sum
mediumRemote Payloadmatched "curl " · github.com/stellar/[email protected]/ingest/ledgerbackend/toml.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.5.1-0.20260605220916-532e2b5144d4High risk362026-06-06
v0.5.1-0.20260604220920-ff1e140adca5High risk362026-06-06

Block this in CI

PkgRadar gates github.com/stellar/go-stellar-sdk (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/stellar/[email protected]