PkgRadar

Go modules · proxy.golang.org

github.com/adbc-drivers/driverbase-go/driverbase

Go Mod Replace Local: go.mod replace directive redirects to a local filesystem path — non-portable / dev-time only.

Why PkgRadar flagged v0.0.0-20260614225341-e29629f90ef8

SeveritySignalEvidence
mediumGo Mod Replace Localgo.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · github.com/adbc-drivers/driverbase-go/[email protected]/go.mod

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260614225341-e29629f90ef8Review102026-06-16
v0.0.0-20260614222945-5966df88680bReview102026-06-16
v0.0.0-20260611213008-39469dd6444bReview102026-06-13
v0.0.0-20260608064711-7f3f9a9f3990Review102026-06-09
v0.0.0-20260608005845-f218ccb883e8Review102026-06-09
v0.0.0-20260608002410-49f9e21a1d4aReview102026-06-09
v0.0.0-20260531215508-9a56b1c7bd6dReview102026-06-02

Block this in CI

PkgRadar gates github.com/adbc-drivers/driverbase-go/driverbase (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/adbc-drivers/driverbase-go/[email protected]