PkgRadar

Go modules · proxy.golang.org

github.com/writer/cerebro

Remote Payload: matched "cURL "

Why PkgRadar flagged v0.0.0-20260618191819-0e742f60da16

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · github.com/writer/[email protected]/internal/bootstrap/auth.go
mediumRemote Payloadmatched "cURL " · github.com/writer/[email protected]/internal/bootstrap/request_origin.go
mediumGo Mod Replace Localgo.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · github.com/writer/[email protected]/go.mod

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260618191819-0e742f60da16Review542026-06-19
v1.0.1-0.20260618184746-62a1aae779ccReview542026-06-19
v0.0.0-20260618174600-6b3a8671218bReview542026-06-19
v1.0.1-0.20260618174410-6522ea469021Review542026-06-19
v1.0.1-0.20260618161031-f75f81c9f8adReview542026-06-19
v0.0.0-20260618161031-f75f81c9f8adReview542026-06-19
v0.0.0-20260618153513-4e369c85c66eReview542026-06-19
v1.0.1-0.20260618152647-49ac8f9acf4dReview542026-06-19
v0.0.0-20260618145002-c99a7fd39a25Review542026-06-19
v0.0.0-20260618142209-2ca720e8d933Review542026-06-19
v0.0.0-20260617231023-05c8b68b8da8Review542026-06-18
v1.0.1-0.20260617223756-0cfe6476732bReview542026-06-18
v0.0.0-20260617190440-784f5eee34f2Review542026-06-18
v0.0.0-20260617165858-b79a38afb59cReview542026-06-18
v1.0.1-0.20260617165858-b79a38afb59cReview542026-06-18
v0.0.0-20260617154319-9af94b29cb0eReview542026-06-18
v1.0.1-0.20260617154319-9af94b29cb0eReview542026-06-18
v1.0.1-0.20260617150147-1e102aeb6403Review542026-06-18
v0.0.0-20260617151358-e451c2185e16Review542026-06-18
v1.0.1-0.20260617151358-e451c2185e16Review542026-06-18

Block this in CI

PkgRadar gates github.com/writer/cerebro (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/writer/[email protected]
Start free — 25 scans / moView full evidence