PkgRadar

Go modules · proxy.golang.org

github.com/viant/agently-core

Remote Payload: matched "cURL "

Why PkgRadar flagged v0.1.13

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/viant/[email protected]/protocol/agent/loader/service.go
mediumRemote Payloadmatched "CURL " · github.com/viant/[email protected]/service/a2a/types.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.1.13Review242026-06-12
v0.1.13-0.20260610200547-996e205c73ceReview242026-06-11
v0.1.13-0.20260610110507-a2a737e21a8aReview242026-06-11
v0.1.13-0.20260609140544-43f6324c116dReview242026-06-10
v0.1.13-0.20260608144603-f0ef8d10670dReview242026-06-09
v0.1.13-0.20260605204001-8cccfd9da357Review242026-06-06
v0.1.12Review242026-06-06
v0.1.12-0.20260605155417-90981186aafcReview242026-06-06
v0.1.11Review242026-06-05
v0.1.11-0.20260604231438-e1150ecfd283Review242026-06-05
v0.1.10-0.20260603230535-307c909e2f94Review242026-06-04
v0.1.10-0.20260603230134-6084f968bae1Review342026-06-04
v0.1.10-0.20260601185406-e19ec1a6f206Review242026-06-02
v0.1.10-0.20260529194756-cdbb2bd7ef28Review242026-05-30
v0.1.10-0.20260528090529-f160cf134764Review242026-05-29

Block this in CI

PkgRadar gates github.com/viant/agently-core (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/viant/[email protected]