Go modules · proxy.golang.org

github.com/xionghengheng/ff_plib

Remote Payload: matched "cUrl "

Why PkgRadar flagged v0.0.0-20260607034003-320e6d347acf

Severity	Signal	Evidence
medium	Remote Payload	matched "cUrl " · github.com/xionghengheng/[email protected]/db/model/coach_client_home_page_banner.go
medium	Remote Payload	matched "cUrl " · github.com/xionghengheng/[email protected]/db/model/coach_page_banner.go

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260607034003-320e6d347acf`	Review	24	2026-06-08
`v0.0.0-20260607032411-a3123a8c14a8`	Review	24	2026-06-08
`v0.0.0-20260606062006-f8b791a1787c`	Review	24	2026-06-07
`v0.0.0-20260606013439-f320d769d0f8`	Review	24	2026-06-07
`v0.0.0-20260605151234-0b65c79c3195`	Review	24	2026-06-06
`v0.0.0-20260531124252-27b384acec68`	Review	24	2026-06-01
`v0.0.0-20260531121515-e643dde4827d`	Review	24	2026-06-01
`v0.0.0-20260531113444-3e7a22c2bde7`	Review	24	2026-06-01
`v0.0.0-20260530094554-5d8e7b208938`	Review	24	2026-05-31
`v0.0.0-20260530083236-122eeeb25a70`	Review	24	2026-05-31

Block this in CI

PkgRadar gates github.com/xionghengheng/ff_plib (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/xionghengheng/[email protected]