PkgRadar

Go modules · proxy.golang.org

github.com/chaintable/pipeline

Go Mod Replace Local: go.mod replace directive redirects to a local filesystem path — non-portable / dev-time only.

Why PkgRadar flagged v0.0.64-0.20260312085751-0985b614dbed

SeveritySignalEvidence
mediumGo Mod Replace Localgo.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · github.com/chaintable/[email protected]/go.mod

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.64-0.20260312085751-0985b614dbedReview102026-06-20
v0.0.55-metis-debank-3.0.20251224075145-e23b2f2d1a12Low risk02026-06-18
v0.0.57-0.20260106033807-0595145d5510Low risk02026-06-18
v0.0.62-celo-l2-v2.1.2-3Low risk02026-06-16
v0.0.65Low risk02026-06-11
v0.0.65-iotex-v2.4.1-debank-2Low risk02026-06-04
v0.0.64Low risk02026-05-30

Block this in CI

PkgRadar gates github.com/chaintable/pipeline (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/chaintable/[email protected]