Go modules · proxy.golang.org

charm.land/bubbles/v2

Go Mod Replace Local

Why PkgRadar flagged v2.0.0-alpha.2.0.20250206205559-b6f90bbf6f9a

Severity	Signal	Evidence
medium	Go Mod Replace Local	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v2.0.0-alpha.2.0.20241113160835-482ab93f347e`	Low risk	0	2026-08-13
`v2.0.0-alpha.1.0.20241029195440-8fdc81c836c0`	Low risk	0	2026-08-13
`v2.0.0-alpha.2.0.20250206205559-b6f90bbf6f9a`	Review	10	2026-08-13
`v2.0.0-alpha.2.0.20250127213809-115378a9466d`	Low risk	0	2026-08-13
`v2.0.0-alpha.2.0.20250122210838-9ce937da3bee`	Low risk	0	2026-08-13
`v2.0.0-alpha.2.0.20250101133715-1ba376616abc`	Low risk	0	2026-08-13
`v2.0.0-beta.1.0.20250423131412-8b901d55ffb8`	Low risk	0	2026-08-13
`v2.0.0-alpha.1.0.20241021175816-31a3d792f2c1`	Review	10	2026-08-13
`v2.0.0-alpha.2.0.20250204183039-f3bfbb2d6818`	Low risk	0	2026-08-13
`v2.0.0-alpha.1.0.20240930145855-a0235795a64d`	Low risk	0	2026-08-13
`v2.0.0-alpha.2.0.20250211170822-468abfc4f698`	Low risk	0	2026-08-13

Block this in CI

PkgRadar gates charm.land/bubbles/v2 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go charm.land/bubbles/[email protected]