PkgRadar

Go modules · proxy.golang.org

github.com/dokku/dokku/plugins/app-json

Go Mod Replace Local: go.mod replace directive redirects to a local filesystem path — non-portable / dev-time only.

Why PkgRadar flagged v0.0.0-20260616152818-97c11b668bfa

SeveritySignalEvidence
mediumGo Mod Replace Localgo.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · github.com/dokku/dokku/plugins/[email protected]/go.mod

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260616152818-97c11b668bfaReview102026-06-17
v0.0.0-20260612023846-23d0080374edReview102026-06-13
v0.0.0-20260610184722-13afe84fdd71Review102026-06-11
v0.0.0-20260609152813-823e1a5dfe55Review102026-06-10
v0.0.0-20260608054155-a9b68e891757Review102026-06-09
v0.0.0-20260607030119-05e11a873d2fReview102026-06-08
v0.0.0-20260603080501-f5064066be55Review102026-06-05
v0.0.0-20260602232449-db798dfe16ccReview102026-06-04
v0.0.0-20260531225058-fd8247018f84Review102026-06-02
v0.0.0-20260531080525-213d89b1e448Review102026-06-01
v0.0.0-20260531011235-ff00bcb218e3Review102026-06-01
v0.0.0-20260530102155-0cea642dd98aReview102026-05-31
v0.0.0-20260530034850-411cb8879612Review102026-05-31
v0.0.0-20260530034719-25d96f3f23abReview102026-05-31
v0.0.0-20260530010546-34b19f99b940Review102026-05-31
v0.0.0-20260528164301-d003bfaf0e52Review102026-05-29

Block this in CI

PkgRadar gates github.com/dokku/dokku/plugins/app-json (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/dokku/dokku/plugins/[email protected]