Go modules · proxy.golang.org

github.com/confluentinc/kcp

Tls Verification Disabled, Remote Payload, Credential file access

Why PkgRadar flagged v0.8.10-0.20260709134515-718251380860

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.8.10-0.20260709134515-718251380860`	Review	64	2026-07-10
`v0.8.9`	Review	64	2026-07-10
`v0.8.8`	Review	64	2026-07-07
`v0.8.7`	Review	64	2026-07-03
`v0.8.7-0.20260626135311-9905f26fdb42`	Review	32	2026-06-27
`v0.8.6`	Review	32	2026-06-27
`v0.8.6-0.20260624145739-9f35241af0d4`	Review	22	2026-06-25
`v0.8.2-0.20260528174323-3a13a2a7f65d`	Review	22	2026-06-25
`v0.8.3`	Low risk	0	2026-06-13
`v0.8.1`	Low risk	0	2026-05-30

Block this in CI

PkgRadar gates github.com/confluentinc/kcp (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/confluentinc/[email protected]