Go modules · proxy.golang.org

github.com/chainreactors/sdk

Tls Verification Disabled

Why PkgRadar flagged v0.3.4-0.20260624031614-b16da9a87441

Severity	Signal	Evidence
medium	Tls Verification Disabled	github.com/chainreactors/[email protected]/pkg/httpx/httpx.go

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.3.4-0.20260624031614-b16da9a87441`	Review	12	2026-06-25
`v0.3.4-0.20260616122655-98280dbe8cb9`	Low risk	0	2026-06-17
`v0.3.3`	Low risk	0	2026-06-17
`v0.3.2-0.20260615090801-c53e8b91dd70`	Low risk	0	2026-06-16
`v0.3.2`	Low risk	0	2026-06-16
`v0.3.1`	Low risk	0	2026-06-13
`v0.3.1-0.20260612031404-1d6721df180b`	Low risk	0	2026-06-13
`v0.3.0`	Low risk	0	2026-06-13
`v0.2.4`	Low risk	0	2026-06-09
`v0.2.4-0.20260608090513-9be651f748f0`	Low risk	0	2026-06-09
`v0.2.4-0.20260605033510-b6044d15639e`	Low risk	0	2026-06-06
`v0.2.4-0.20260604094755-5bb0e6c09abd`	Low risk	0	2026-06-06
`v0.2.3-0.20260530143930-0ca393a17ca4`	Low risk	0	2026-05-31
`v0.2.3`	Low risk	0	2026-05-30
`v0.2.3-0.20260529125956-4741de355c3a`	Low risk	0	2026-05-30
`v0.2.2`	Low risk	0	2026-05-30

Block this in CI

PkgRadar gates github.com/chainreactors/sdk (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/chainreactors/[email protected]