PkgRadar

Go modules · proxy.golang.org

github.com/chnxq/xkitpkg/middleware

Go Mod Replace Local: go.mod replace directive redirects to a local filesystem path — non-portable / dev-time only.

Why PkgRadar flagged v0.0.0-20260613032609-8cf815dcaea2

SeveritySignalEvidence
mediumGo Mod Replace Localgo.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · github.com/chnxq/xkitpkg/[email protected]/go.mod

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260613032609-8cf815dcaea2Review102026-06-16
v0.0.0-20260614081852-4e56d1470ffdReview102026-06-16
v0.0.0-20260614094309-8dd54b5060bdReview102026-06-16
v0.0.0-20260614100214-da276b9ddf99Review102026-06-15
v0.0.0-20260614083338-09ce480c23d5Review102026-06-15
v0.0.0-20260613055836-e8183b9771c8Review102026-06-14
v0.0.0-20260611040354-12618fedb015Review102026-06-14
v0.0.0-20260612144631-fc9d007bf51bReview102026-06-14
v0.0.0-20260613042622-08bb39f0c9d1Review102026-06-14
v0.0.0-20260421141638-80e4b484ff8fReview102026-06-02
v0.0.0-20260411150755-730cedf1327bLow risk02026-06-02
v0.0.0-20260411151307-f4b1647fa88bLow risk02026-06-02
v0.0.0-20260411135730-0b47684939b1Low risk02026-06-02
v0.0.0-20260411143413-473fd09410d2Low risk02026-06-02
v0.0.0-20260529105210-f5ea09d00e89Review102026-06-02
v0.0.0-20260411151207-f4a3e6c48938Low risk02026-06-02
v0.0.0-20260413152101-92ac4a23ffa1Low risk02026-06-02
v0.0.0-20260411142209-9ba051e9a07dLow risk02026-06-02
v0.0.0-20260414172720-f4c5f6acbb3aLow risk02026-06-02
v0.0.0-20260416153812-618f4beb7d78Low risk02026-06-02
v0.0.0-20260417145708-1fba65f27586Low risk02026-06-02
v0.0.0-20260418035512-1c3a2a7d2edcReview102026-06-02

Block this in CI

PkgRadar gates github.com/chnxq/xkitpkg/middleware (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/chnxq/xkitpkg/[email protected]
Start free — 25 scans / moView full evidence