Go modules · proxy.golang.org

github.com/c5c3/forge/operators/keystone

Remote Payload, Go Mod Replace Local

Why PkgRadar flagged v0.0.0-20260719201553-5f42b20eafbb

Severity	Signal	Evidence
medium	Remote Payload	—
medium	Go Mod Replace Local	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260719201553-5f42b20eafbb`	Review	22	2026-07-20
`v0.0.0-20260719171534-53fd20dba028`	Review	22	2026-07-20
`v0.0.0-20260719093118-ee4a3122b6e4`	Review	22	2026-07-20
`v0.0.0-20260719071253-328ee4e860e9`	Review	22	2026-07-20
`v0.0.0-20260718213529-e0bdf569929f`	Review	22	2026-07-19
`v0.0.0-20260718182220-b9f64ec47f88`	Review	22	2026-07-19
`v0.0.0-20260718154613-1bef636e5d0d`	Review	22	2026-07-19
`v0.0.0-20260718121822-5041701f4c54`	Review	22	2026-07-19
`v0.0.0-20260718090420-c96d9a1275b5`	Review	22	2026-07-19
`v0.0.0-20260717170659-1afa3002f96f`	Review	22	2026-07-18
`v0.0.0-20260717131522-0bb2192d2028`	Review	22	2026-07-18
`v0.0.0-20260717105224-0bcd683c2853`	Review	22	2026-07-18

Block this in CI

PkgRadar gates github.com/c5c3/forge/operators/keystone (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/c5c3/forge/operators/[email protected]