PkgRadar

Go modules · proxy.golang.org

google.golang.org/api

Remote Payload: matched "cUrl "

Why PkgRadar flagged v0.285.0

SeveritySignalEvidence
mediumRemote Payloadmatched "cUrl " · google.golang.org/[email protected]/cloudsearch/v1/cloudsearch-gen.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.285.0Review152026-06-17
v0.0.0-20260615171252-50adedd746e1Review152026-06-16
v0.0.0-20260613073427-087611c9a9b2Review152026-06-14
v0.0.0-20260612073627-17394ca1afffReview152026-06-13
v0.0.0-20260611081228-21a12ed9dc47Review152026-06-12
v0.0.0-20260609185231-5c6a0b03b25aReview152026-06-10
v0.284.0Review152026-06-10
v0.0.0-20260609074040-1ef362535b2fReview152026-06-10
v0.283.0Review152026-06-02

Block this in CI

PkgRadar gates google.golang.org/api (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go google.golang.org/[email protected]