Go modules · proxy.golang.org

github.com/docker/distribution

Credential file access

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v2.0.0-alpha.3.0.20150318042912-53e1b27a76f6+incompatible`	Low risk	0	2026-07-18
`v0.0.0-20190513030212-414cebd40e46`	Low risk	0	2026-07-16
`v0.0.0-20170425163017-e85ef3c019a2`	Review	5	2026-07-14
`v2.5.0-rc.1.0.20161028235832-994d1a56ffbf+incompatible`	Review	5	2026-07-10
`v2.6.0-rc.1.0.20170720205755-91c507a39abf+incompatible`	Review	5	2026-07-10
`v2.4.0-rc.1.0.20160524180910-0bd7e971b05e+incompatible`	Review	5	2026-07-10
`v2.0.0-alpha.2.0.20150223233141-47a8ad7a61d1+incompatible`	Low risk	0	2026-07-03
`v0.0.0-20151008235147-20c4b7a1805a`	Review	17	2026-06-30
`v2.0.1-0.20150506231254-fbd022e45217+incompatible`	Low risk	0	2026-06-29
`v0.0.0-20160819183514-fd4dd8dd16c2`	Review	5	2026-06-23
`v0.0.0-20180201214934-85b4d46b4f4a`	Review	5	2026-06-21

Block this in CI

PkgRadar gates github.com/docker/distribution (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/docker/[email protected]