PkgRadar

Go modules · proxy.golang.org

github.com/NVIDIA/infra-controller/rest-api

Go Mod Replace Local: go.mod replace directive redirects to a local filesystem path — non-portable / dev-time only.

Why PkgRadar flagged v0.0.0-20260603004519-b91cb44f5415

SeveritySignalEvidence
mediumGo Mod Replace Localgo.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · github.com/nvidia/infra-controller/[email protected]/go.mod

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260603004519-b91cb44f5415Review102026-06-04
v0.0.0-20260603003334-d4028f2713bbReview102026-06-04
v0.0.0-20260603001753-d2dc5f768f19Review102026-06-04
v0.0.0-20260602232956-752d6535d3ddReview102026-06-03
v0.0.0-20260602232009-fdd3f6d91e97Review102026-06-03

Block this in CI

PkgRadar gates github.com/NVIDIA/infra-controller/rest-api (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/NVIDIA/infra-controller/[email protected]