Go modules · proxy.golang.org

github.com/Go-Acme/lego/v3

Tls Verification Disabled, Remote Payload, Credential file access

Why PkgRadar flagged v3.6.1-0.20200427192829-4fe3bcfc6f77

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v3.6.1-0.20200427192829-4fe3bcfc6f77`	Review	44	2026-09-01
`v3.8.1-0.20200708201654-23328fcdd27b`	Review	44	2026-09-01
`v3.7.1-0.20200516225755-e5d4dd166d63`	Review	44	2026-09-01
`v3.0.3-0.20191107105044-e6ff55759651`	Review	44	2026-09-01
`v3.1.1-0.20191018183338-41a938463827`	Review	44	2026-09-01
`v3.3.1-0.20200109000704-1bd4b7071b27`	Review	44	2026-09-01
`v3.4.1-0.20200225230229-9d31db300bee`	Review	44	2026-09-01
`v3.5.1-0.20200504135641-a7eb2cd258ca`	Review	44	2026-09-01
`v3.0.3-0.20190820164041-cf879d0b3c31`	Review	44	2026-09-01
`v3.1.1-0.20191030204048-a8484e395454`	Review	44	2026-09-01
`v3.1.0`	Review	44	2026-09-01
`v3.2.0`	Review	44	2026-09-01
`v3.3.0`

Block this in CI

PkgRadar gates github.com/Go-Acme/lego/v3 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/Go-Acme/lego/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.