Go modules · proxy.golang.org
github.com/tim5wang/godex
Remote Payload: matched "wget "
Why PkgRadar flagged v1.0.1-0.20260619024320-07f59be33e4c
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "wget " · github.com/tim5wang/[email protected]/internal/agent/system_prompt_dynamic.go |
| medium | Remote Payload | matched "curl " · github.com/tim5wang/[email protected]/internal/core/config/defaults.go |
| medium | Remote Payload | matched "curl " · github.com/tim5wang/[email protected]/internal/platform/tooling/tooling.go |
| medium | Remote Payload | matched "curl " · github.com/tim5wang/[email protected]/internal/toolruntime/permissions.go |
| medium | Remote Payload | matched "github.com/lightpanda-io/browser/releases/download" · github.com/tim5wang/[email protected]/internal/tools/lightpanda.go |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v1.0.1-0.20260619024320-07f59be33e4c | Review | 24 | 2026-06-20 |
v1.0.0 | Review | 24 | 2026-06-20 |
Block this in CI
pkgradar gate --ecosystem go github.com/tim5wang/[email protected]