PkgRadar

Go modules · proxy.golang.org

github.com/boldsoftware/shelley

Go Mod Replace Local: go.mod replace directive redirects to a local filesystem path — non-portable / dev-time only.

Why PkgRadar flagged v0.0.0-20260609172903-17ca442f6024

SeveritySignalEvidence
mediumGo Mod Replace Localgo.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · github.com/boldsoftware/[email protected]/go.mod

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260609172903-17ca442f6024Review102026-06-11
v0.683.95745104Review102026-06-10
v0.682.910303734Review102026-06-10
v0.0.0-20260609035010-f688d1f34d4fReview102026-06-10
v0.678.974250163Low risk02026-06-10
v0.681.975504321Review102026-06-10
v0.677.91360322Low risk02026-06-10
v0.674.922516676Low risk02026-06-09
v0.675.93520305Low risk02026-06-09
v0.676.954710737Low risk02026-06-09
v0.667.970013757Low risk02026-06-06
v0.672.94575177Low risk02026-06-06
v0.663.920537032Low risk02026-06-06
v0.665.942414155Low risk02026-06-06
v0.668.962612372Low risk02026-06-06
v0.662.95035311Low risk02026-06-06
v0.664.91527770Low risk02026-06-06
v0.670.924531666Low risk02026-06-06
v0.671.913440173Low risk02026-06-06
v0.666.970675226Low risk02026-06-06
v0.673.946470207Low risk02026-06-06
v0.644.923216405Low risk02026-06-04
v0.645.97361321Low risk02026-06-04
v0.646.913252433Low risk02026-06-04
v0.647.943053011Low risk02026-06-04
v0.648.917563741Low risk02026-06-04
v0.649.914703420Low risk02026-06-04
v0.653.941623276Low risk02026-06-04
v0.656.91210515432Low risk02026-06-04
v0.660.923074223Low risk02026-06-04
v0.661.957170170Low risk02026-06-03
v0.659.956461465Low risk02026-06-03
v0.655.912763466Low risk02026-06-03
v0.654.956774575Low risk02026-06-03
v0.643.950357210Low risk02026-06-02
v0.635.912045332Low risk02026-06-01
v0.632.914373422Low risk02026-06-01
v0.623.911107272Low risk02026-06-01
v0.621.947103050Low risk02026-06-01
v0.629.936552547Low risk02026-06-01
v0.633.917713624Low risk02026-06-01
v0.642.942743343Low risk02026-06-01
v0.628.955530036Low risk02026-05-30

Block this in CI

PkgRadar gates github.com/boldsoftware/shelley (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/boldsoftware/[email protected]