PkgRadar

Go modules · proxy.golang.org

review.dev.storj.io/storj/storj.git

Remote Payload: matched "curl "

Why PkgRadar flagged v1.155.8

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · review.dev.storj.io/storj/[email protected]/go.sum

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.155.8Review172026-06-12
v1.155.7Review172026-06-11
v1.157.0-rc.0.20260610094017-3df0a889ac0aReview172026-06-11
v1.155.6Review172026-06-11
v1.156.0-rc.0.20260605171614-1c415f391263Review172026-06-07
v1.156.0-rc.0.20260605130000-13a522f9bca9Review172026-06-06
v1.155.5Review172026-06-06
v1.155.0-rc.0.20260601191752-3bbb1c66f04cReview172026-06-02
v1.155.2-rcReview172026-06-02
v1.155.1-rcReview172026-06-02
v1.155.0-rcReview172026-06-02
v1.155.3-rcReview172026-06-02
v1.155.0-rc.0.20260601114441-d9dba7f41af9Review172026-06-02

Block this in CI

PkgRadar gates review.dev.storj.io/storj/storj.git (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go review.dev.storj.io/storj/[email protected]
Start free — 25 scans / moView full evidence