PkgRadar

Go modules · proxy.golang.org

github.com/CSUNATL/crypto

Tls Verification Disabled: matched "InsecureSkipVerify: true"

Why PkgRadar flagged v0.10.0

SeveritySignalEvidence
mediumTls Verification Disabledmatched "InsecureSkipVerify: true" · github.com/csunatl/[email protected]/acme/autocert/internal/acmetest/ca.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.10.0Review122026-06-20
v0.23.0Review122026-06-20
v0.24.0Review122026-06-20
v0.8.0Review122026-06-20
v0.25.0Low risk02026-06-19
v0.27.0Low risk02026-06-19
v0.4.0Low risk02026-06-19
v0.49.0Low risk02026-06-19
v0.14.0Low risk02026-06-19
v0.44.0Low risk02026-06-19
v0.1.0Low risk02026-06-19
v0.48.0Low risk02026-06-19
v0.32.0Low risk02026-06-19
v0.28.0Low risk02026-06-19
v0.35.0Low risk02026-06-19
v0.13.0Low risk02026-06-19
v0.51.0Low risk02026-06-19
v0.46.0Low risk02026-06-19
v0.29.0Low risk02026-06-19
v0.30.0Low risk02026-06-19
v0.39.0Low risk02026-06-19
v0.38.0Low risk02026-06-19
v0.2.0Low risk02026-06-19

Block this in CI

PkgRadar gates github.com/CSUNATL/crypto (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/CSUNATL/[email protected]