PkgRadar

Go modules · proxy.golang.org

go.githedgehog.com/fabric

Remote Payload: matched "cURL "

Why PkgRadar flagged v0.122.3

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · go.githedgehog.com/[email protected]/pkg/boot/nosinstall/run.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.122.3Review122026-06-13
v0.122.3-0.20260612055040-73a8c92cbddfReview122026-06-13
v0.122.3-0.20260611203753-6e9c7337461aReview122026-06-12
v0.122.3-0.20260611154857-c4dcfe3394a0Review122026-06-12
v0.122.2-0.20260611072520-fb6f480e36b9Review122026-06-12
v0.122.2-0.20260611052428-a4bc5c96f2bfReview122026-06-12
v0.122.1Review122026-06-11
v0.122.1-0.20260610155751-dcdf854af0fcReview122026-06-11
v0.122.1-0.20260610152154-4fb941dea1caReview122026-06-11
v0.122.1-0.20260610064812-16a34ceed437Review122026-06-11
v0.122.1-0.20260610062304-8a9e711d8a07Review122026-06-11
v0.121.1-0.20260609125043-5b496519d9f4Review122026-06-10
v0.121.1-0.20260609072055-1695dba689d7Review122026-06-10
v0.121.1-0.20260608215306-fbc9b0275ca6Review122026-06-09
v0.121.1-0.20260604193658-71ec9ee032fbReview122026-06-05
v0.121.1-0.20260604193637-cd31693ad7deReview122026-06-05
v0.121.1-0.20260604154413-fe9b992f3c02Review122026-06-05
v0.121.1-0.20260604151633-1e3ca96e6ec7Review122026-06-05
v0.121.1-0.20260604142051-f80edbc2c790Review122026-06-05
v0.121.1-0.20260604141020-c1403aed28d6Review122026-06-05
v0.121.1-0.20260603105049-8de10b044b60Review122026-06-04
v0.121.1-0.20260603045149-bcfa2a80e765Review122026-06-04
v0.121.1-0.20260603044953-c8efa9e86a86Review122026-06-04
v0.121.1-0.20260602020034-3729d462a30cReview122026-06-03
v0.121.1-0.20260602013058-6cea609a2625Review122026-06-03
v0.121.1-0.20260601191732-00410c0cec28Review122026-06-02
v0.121.1-0.20260528100329-472523d8ff54Review122026-05-30
v0.121.1-0.20260528082021-46f59a68f54aReview122026-05-30

Block this in CI

PkgRadar gates go.githedgehog.com/fabric (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go go.githedgehog.com/[email protected]