PkgRadar

Go modules · proxy.golang.org

github.com/Open-telemetry/opentelemetry-collector-contrib

Go Mod Replace Local: go.mod replace directive redirects to a local filesystem path — non-portable / dev-time only.

Why PkgRadar flagged v0.96.0

SeveritySignalEvidence
mediumGo Mod Replace Localgo.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · github.com/open-telemetry/[email protected]/go.mod

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.96.0Review102026-06-21
v0.97.0Review102026-06-21
v0.68.0Review102026-06-20
v0.31.0Review222026-06-20
v0.50.0Review102026-06-20
v0.64.0Review102026-06-20
v0.74.0Review102026-06-20
v0.7.0Review222026-06-20
v0.66.0Review102026-06-20
v0.135.0Low risk02026-06-20
v0.125.0Low risk02026-06-20
v0.32.0Review222026-06-20
v0.126.0Low risk02026-06-20
v0.86.0Review102026-06-20
v0.22.0-sumoReview222026-06-20
v0.61.0Review102026-06-20
v0.128.0Low risk02026-06-20
v0.25.0-sumo-1Review222026-06-20
v0.13.0Review222026-06-20
v0.93.0Review102026-06-20
v0.52.0Review102026-06-20
v0.85.0Review102026-06-20
v0.17.0Review222026-06-20
v0.8.0Review222026-06-20
v0.89.0Review102026-06-20
v0.122.0Low risk02026-06-20
v0.77.0Review102026-06-20
v0.79.0Review102026-06-20
v0.13.1Review222026-06-20
v0.6.0Review222026-06-20
v0.46.0Review222026-06-20
v0.29.0Review222026-06-20
v0.138.0Low risk02026-06-20
v0.30.0Review222026-06-20
v0.16.2-sumoReview222026-06-20
v0.0.1Review102026-06-20
v0.38.0-sumo-rc.2Review222026-06-20
v0.63.0Review102026-06-20
v0.133.0Low risk02026-06-20
v0.33.0Review222026-06-20
v0.39.0Review222026-06-20
v0.102.0Review102026-06-20
v0.38.0Review222026-06-20
v0.120.1Low risk02026-06-20
v0.16.0Review222026-06-20
v0.107.0Low risk02026-06-20
v0.10.0Review222026-06-20
v0.58.0Review102026-06-20
v0.59.0Review102026-06-20
v0.88.0Review102026-06-20
v0.98.0Review102026-06-20
v0.20.0Review222026-06-20
v0.154.1-0.20260619075208-20cd6514ae66Low risk02026-06-20
v0.95.0Review102026-06-20

Block this in CI

PkgRadar gates github.com/Open-telemetry/opentelemetry-collector-contrib (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/Open-telemetry/[email protected]