PkgRadar

Go modules · proxy.golang.org

github.com/tupicapp/restreamer

Remote Payload: matched "cURL "

Why PkgRadar flagged v0.0.0-20260615113600-a79a91237a32

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/tupicapp/[email protected]/core/manifest_runner.go
mediumRemote Payloadmatched "cURL " · github.com/tupicapp/[email protected]/core/runtime/config.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260615113600-a79a91237a32Review242026-06-16
v0.0.0-20260610100210-d913c6fae4d9Low risk02026-06-16
v0.0.0-20260614154532-9c293baf5e6dLow risk02026-06-15
v0.0.0-20260614084755-2dd6ef1e1b1aLow risk02026-06-15
v0.0.0-20260613084915-6f9eb95e005eLow risk02026-06-14
v0.0.0-20260610131437-7342557bcb9dLow risk02026-06-11
v0.0.0-20260610101613-253bea6d029cLow risk02026-06-11
v0.0.0-20260603091640-a5730943d4bbLow risk02026-06-04
v0.0.0-20260602152149-fbea342a0961Low risk02026-06-03
v0.0.0-20260530142628-276e91a3a255Low risk02026-05-31
v0.0.0-20260530133619-fcde7f60e015Low risk02026-05-31
v0.0.0-20260530101836-3f1792dafdfaLow risk02026-05-31

Block this in CI

PkgRadar gates github.com/tupicapp/restreamer (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/tupicapp/[email protected]
Start free — 25 scans / moView full evidence