PkgRadar

Go modules · proxy.golang.org

github.com/trsreagan3/gbounce

Remote Payload: matched "curl "

Why PkgRadar flagged v0.0.0-20260604014522-d156917e1d42

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/trsreagan3/[email protected]/internal/proxy/admin_ui.go
mediumRemote Payloadmatched "curl " · github.com/trsreagan3/[email protected]/internal/proxy/feature_status.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260604014522-d156917e1d42Review392026-06-05
v0.0.0-20260604011804-5e60fb6f79a9Review392026-06-05
v0.0.0-20260602235936-bccab8d2ba67Review392026-06-03
v0.0.0-20260602232049-f87186847b3dReview392026-06-03
v0.0.0-20260602221916-a51add3a7738Review392026-06-03
v0.0.0-20260602194747-309355025c3eReview392026-06-03
v0.0.0-20260602145550-4b94a3ed65a9Review342026-06-03
v0.0.0-20260602141507-58f9e1fba4f2Review342026-06-03
v0.0.0-20260602123001-c79ac53edbfdReview342026-06-03
v0.0.0-20260602114818-e547ca179430Review342026-06-03
v0.0.0-20260602023634-7520c0bf7ba8Review102026-06-03
v0.0.0-20260527121128-b724b7a0e30eReview272026-05-29

Block this in CI

PkgRadar gates github.com/trsreagan3/gbounce (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/trsreagan3/[email protected]