PkgRadar

Go modules · proxy.golang.org

github.com/vaynerx/x

Remote Payload: matched "curl "

Why PkgRadar flagged v0.0.96-0.20200223155522-b03fe43c0bff

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/vaynerx/[email protected]/go.sum
mediumTls Verification Disabledmatched "--insecure" · github.com/vaynerx/[email protected]/sqlcon/dockertest/test_helper.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.96-0.20200223155522-b03fe43c0bffReview242026-06-20
v0.0.27Review122026-06-20
v0.0.30Review122026-06-20
v0.0.35Review122026-06-20
v0.0.44Review122026-06-20
v0.0.45Review122026-06-20
v0.0.69Review242026-06-20
v0.0.1Low risk02026-06-20
v0.0.79Review242026-06-20
v0.0.88Review242026-06-20
v0.0.90Review242026-06-20
v0.0.95Review242026-06-20
v0.0.81Review242026-06-20
v0.0.46Review122026-06-20
v0.0.66Review242026-06-20
v0.0.32Review122026-06-20
v0.0.71Review242026-06-20
v0.0.89Review242026-06-20

Block this in CI

PkgRadar gates github.com/vaynerx/x (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/vaynerx/[email protected]
Start free — 25 scans / moView full evidence