PkgRadar

Go modules · proxy.golang.org

github.com/aql-lang/aql/cmd/go

Go Mod Replace Local: go.mod replace directive redirects to a local filesystem path — non-portable / dev-time only.

Why PkgRadar flagged v0.0.0-20260616072933-edac806faa99

SeveritySignalEvidence
mediumGo Mod Replace Localgo.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · github.com/aql-lang/aql/cmd/[email protected]/go.mod

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260616072933-edac806faa99Review102026-06-17
v0.0.0-20260615203859-6da0f186cb3dReview102026-06-17
v0.0.0-20260614142128-cdd50b40d386Review102026-06-16
v0.0.0-20260613103703-3662d6db9e22Review102026-06-15
v0.0.0-20260612160235-6fe4b96045e8Review102026-06-13
v0.0.0-20260611165427-26fc46a03230Review102026-06-12
v0.0.0-20260611024449-958c379b1229Review102026-06-12
v0.0.0-20260602124058-ed009f7db3a9Review102026-06-03
v0.0.0-20260601220554-d3aa982a41e1Review102026-06-03
v0.0.0-20260529203316-f7247dd64b05Review102026-05-30
v0.0.0-20260528113400-4a9708cd153bReview102026-05-29

Block this in CI

PkgRadar gates github.com/aql-lang/aql/cmd/go (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/aql-lang/aql/cmd/[email protected]