PkgRadar

Go modules · proxy.golang.org

gopkg.in/juju/charm.v5-unstable

Remote Payload: matched "curl "

Why PkgRadar flagged v5.0.0-20150327182947-bea01bf218c7

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · gopkg.in/juju/[email protected]/charmrepo/charmstore.go
mediumRemote Payloadmatched "curl " · gopkg.in/juju/[email protected]/charmrepo/legacy.go
mediumRemote Payloadmatched "curl " · gopkg.in/juju/[email protected]/charmrepo/params.go
mediumRemote Payloadmatched "curl " · gopkg.in/juju/[email protected]/charmrepo/repo.go
mediumRemote Payloadmatched "curl " · gopkg.in/juju/[email protected]/testing/charm.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v5.0.0-20150327182947-bea01bf218c7Review242026-06-20

Block this in CI

PkgRadar gates gopkg.in/juju/charm.v5-unstable (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go gopkg.in/juju/[email protected]