Go modules · proxy.golang.org

github.com/datadog/dd-trace-go/contrib/twitchtv/twirp/v2

Go Mod Replace Local: go.mod replace directive redirects to a local filesystem path — non-portable / dev-time only.

Why PkgRadar flagged v2.9.0-dev.0.20260527180125-5e9edeb0c504

Severity	Signal	Evidence
medium	Go Mod Replace Local	go.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · github.com/datadog/dd-trace-go/contrib/twitchtv/twirp/[email protected]/go.mod

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v2.9.0-dev.0.20260603175041-72b6fb0904bc`	Low risk	0	2026-06-04
`v2.9.0-dev.0.20260603163403-5c02f616b0d2`	Low risk	0	2026-06-04
`v2.8.3-rc.1`	Low risk	0	2026-06-04
`v2.7.0-dev.1.0.20260313145244-297f9ab49c78`	Low risk	0	2026-06-04
`v2.7.0-dev.1.0.20260312161155-1ebb74bfed5b`	Low risk	0	2026-06-04
`v2.7.0-dev.1.0.20260305120447-d4c51c7eccb7`	Low risk	0	2026-06-04
`v2.7.0-dev.1.0.20260318132737-cf09c586aae9`	Low risk	0	2026-06-04
`v2.9.0-dev.0.20260601200509-03b1a1fe6b78`	Low risk	0	2026-06-02
`v2.9.0-dev.0.20260414120804-42ba2e8e5f20`	Low risk	0	2026-06-02
`v2.9.0-dev.0.20260529111835-7f2956521819`	Low risk	0	2026-05-30
`v2.9.0-dev.0.20260527180125-5e9edeb0c504`	Review	10	2026-05-29
`v2.7.0-dev.1.0.20260217170141-6cb4534a7022`	Review	10	2026-05-29

Block this in CI

PkgRadar gates github.com/datadog/dd-trace-go/contrib/twitchtv/twirp/v2 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/datadog/dd-trace-go/contrib/twitchtv/twirp/[email protected]