PkgRadar

Go modules · proxy.golang.org

go.einride.tech/sage

Remote Payload: matched "curl "

Why PkgRadar flagged v0.414.0

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · go.einride.tech/[email protected]/sg/makefile.go
mediumRemote Payloadmatched "github.com/rhysd/actionlint/releases/download" · go.einride.tech/[email protected]/tools/sgactionlint/tools.go
mediumRemote Payloadmatched "github.com/googleapis/api-linter/releases/download" · go.einride.tech/[email protected]/tools/sgapilinter/tools.go
mediumRemote Payloadmatched "github.com/einride/backstage-go/releases/download" · go.einride.tech/[email protected]/tools/sgbackstage/tools.go
mediumRemote Payloadmatched "github.com/balena-io/balena-cli/releases/download" · go.einride.tech/[email protected]/tools/sgbalenacli/tools.go
mediumRemote Payloadmatched "github.com/dkorunic/betteralign/releases/download" · go.einride.tech/[email protected]/tools/sgbetteralign/tools.go
mediumRemote Payloadmatched "github.com/biomejs/biome/releases/download" · go.einride.tech/[email protected]/tools/sgbiome/tools.go
mediumRemote Payloadmatched "github.com/bufbuild/buf/releases/download" · go.einride.tech/[email protected]/tools/sgbuf/tools.go
mediumRemote Payloadmatched "github.com/convco/convco/releases/download" · go.einride.tech/[email protected]/tools/sgconvco/tools.go
mediumRemote Payloadmatched "github.com/firebase/firebase-tools/releases/download" · go.einride.tech/[email protected]/tools/sgfirebasetools/tool.go
mediumRemote Payloadmatched "github.com/jandelgado/gcov2lcov/releases/download" · go.einride.tech/[email protected]/tools/sggcov2lcov/tools.go
mediumRemote Payloadmatched "github.com/cli/cli/releases/download" · go.einride.tech/[email protected]/tools/sggh/tools.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.414.0High risk1102026-06-04

Block this in CI

PkgRadar gates go.einride.tech/sage (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go go.einride.tech/[email protected]