PkgRadar

Go modules · proxy.golang.org

github.com/taigrr/crush

Go Generate Shell: //go:generate directive shells out to curl/wget/bash — runs during `go generate`.

Why PkgRadar flagged v0.75.8

SeveritySignalEvidence
mediumGo Generate Shell//go:generate directive shells out to curl/wget/bash — runs during `go generate`. · github.com/taigrr/[email protected]/internal/agent/hyper/provider.go
mediumRemote Payloadmatched "curl " · github.com/taigrr/[email protected]/internal/cmd/run.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.75.8Review322026-06-14
v0.69.0Review322026-06-08
v0.75.3Review322026-06-08
v0.70.0Review322026-06-08
v0.71.0Review322026-06-08
v0.75.0Review322026-06-08
v0.74.0Review322026-06-08
v0.72.0Review322026-06-08
v0.71.1Review322026-06-08
v0.68.0Review322026-06-08
v0.75.4Review322026-06-08
v0.75.7Review322026-06-07
v0.75.1Review322026-06-06
v0.75.2Review322026-06-06
v0.73.2Review322026-06-01
v0.69.1Review322026-05-30
v0.69.1-0.20260515183047-4686002d6439Review322026-05-30
v0.73.1Review322026-05-30

Block this in CI

PkgRadar gates github.com/taigrr/crush (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/taigrr/[email protected]
Start free — 25 scans / moView full evidence