Go modules · proxy.golang.org

github.com/apache/pulsar/pulsar-function-go

Go Mod Replace Local

Why PkgRadar flagged v0.0.0-20260824032317-ee4ee98136eb

Severity	Signal
medium	Go Mod Replace Local

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260901021022-41255fbe5335`	Low risk	0	2026-09-02
`v0.0.0-20260831230249-10c6cf11e7ed`	Low risk	0	2026-09-01
`v0.0.0-20260828155448-367caffaa1fa`	Low risk	0	2026-08-29
`v0.0.0-20260828135839-36ff86c8fdfd`	Low risk	0	2026-08-29
`v0.0.0-20260828015652-0c37fd30df8b`	Low risk	0	2026-08-29
`v0.0.0-20260827175741-7e9edb8b043c`	Low risk	0	2026-08-28
`v0.0.0-20260827170432-71c41096e1db`	Low risk	0	2026-08-28
`v0.0.0-20260824032317-ee4ee98136eb`	Review	10	2026-08-25
`v0.0.0-20260823204651-53b6f623bd0c`	Review	10	2026-08-24
`v0.0.0-20260820085737-00a6badafc62`	Review	10	2026-08-21
`v0.0.0-20260820030210-a25ae29c2afb`	Review	10	2026-08-21
`v0.0.0-20260819132103-99ae8ae9f083`	Review	10	2026-08-20

Block this in CI

PkgRadar gates github.com/apache/pulsar/pulsar-function-go (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/apache/pulsar/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.