PkgRadar

Go modules · proxy.golang.org

github.com/asnowfix/home-automation/myhome/daemon

Go Mod Replace Local: go.mod replace directive redirects to a local filesystem path — non-portable / dev-time only.

Why PkgRadar flagged v0.0.0-20260617092722-d02edf9303d0

SeveritySignalEvidence
mediumGo Mod Replace Localgo.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · github.com/asnowfix/home-automation/myhome/[email protected]/go.mod

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260617092722-d02edf9303d0Review102026-06-19
v0.0.0-20260615193453-7f3c12ae6809Low risk02026-06-16
v0.0.0-20260615171018-fd504ca041d2Low risk02026-06-16
v0.0.0-20260613165428-0dcd3bc53bf2Low risk02026-06-14
v0.0.0-20260613135042-9f11e3a87c01Low risk02026-06-14
v0.0.0-20260613072916-8f6c43efcd5aLow risk02026-06-14
v0.0.0-20260607221112-fbac382397daLow risk02026-06-09
v0.0.0-20260526212728-db338e2ac8d7Low risk02026-05-29

Block this in CI

PkgRadar gates github.com/asnowfix/home-automation/myhome/daemon (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/asnowfix/home-automation/myhome/[email protected]