PkgRadar

Go modules · proxy.golang.org

github.com/chnxq/xkitpkg/transport

Go Mod Replace Local: go.mod replace directive redirects to a local filesystem path — non-portable / dev-time only.

Why PkgRadar flagged v0.0.0-20260411142209-9ba051e9a07d

SeveritySignalEvidence
mediumGo Mod Replace Localgo.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · github.com/chnxq/xkitpkg/[email protected]/go.mod

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260614080916-2469689c9333Low risk02026-06-15
v0.0.0-20260614100214-da276b9ddf99Low risk02026-06-15
v0.0.0-20260614083338-09ce480c23d5Low risk02026-06-15
v0.0.0-20260613055836-e8183b9771c8Low risk02026-06-14
v0.0.0-20260612144631-fc9d007bf51bLow risk02026-06-14
v0.0.0-20260613042622-08bb39f0c9d1Low risk02026-06-14
v0.0.0-20260421141638-80e4b484ff8fLow risk02026-06-02
v0.0.0-20260411142209-9ba051e9a07dReview102026-06-02
v0.0.0-20260413152101-92ac4a23ffa1Low risk02026-06-02
v0.0.0-20260411143413-473fd09410d2Review102026-06-02
v0.0.0-20260414172720-f4c5f6acbb3aLow risk02026-06-02
v0.0.0-20260411151207-f4a3e6c48938Low risk02026-06-02
v0.0.0-20260411132324-bea7b90507aaLow risk02026-06-02
v0.0.0-20260411150755-730cedf1327bLow risk02026-06-02
v0.0.0-20260411135730-0b47684939b1Review102026-06-02
v0.0.0-20260529105210-f5ea09d00e89Low risk02026-06-02
v0.0.0-20260411151307-f4b1647fa88bLow risk02026-06-02
v0.0.0-20260416153812-618f4beb7d78Low risk02026-06-02
v0.0.0-20260417145708-1fba65f27586Low risk02026-06-02
v0.0.0-20260418035512-1c3a2a7d2edcLow risk02026-06-02

Block this in CI

PkgRadar gates github.com/chnxq/xkitpkg/transport (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/chnxq/xkitpkg/[email protected]
Start free — 25 scans / moView full evidence