PkgRadar

Go modules · proxy.golang.org

gopkg.in/foxforensics/fox.v4

Remote Payload: matched "Curl "

Why PkgRadar flagged v4.58.6

SeveritySignalEvidence
mediumRemote Payloadmatched "Curl " · gopkg.in/foxforensics/[email protected]/internal/cmd/str/str.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v4.58.6Review122026-06-13
v4.58.4Review122026-06-12
v4.58.0Review122026-06-12
v4.57.1Review122026-06-12
v4.58.3Review122026-06-12
v4.57.0Review122026-06-12
v4.56.0Review122026-06-02
v4.55.1-0.20260531005115-dbd5bfd49d16Review122026-06-02
v4.53.1Low risk02026-06-02
v4.55.0Review122026-06-02
v4.43.3Low risk02026-05-29
v4.53.0Low risk02026-05-29

Block this in CI

PkgRadar gates gopkg.in/foxforensics/fox.v4 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go gopkg.in/foxforensics/[email protected]