Go modules · proxy.golang.org

github.com/envoyproxy/go-control-plane/contrib

Go Mod Replace Local

Why PkgRadar flagged v1.36.1-0.20260729145720-a2d8c7492908

Severity	Signal	Evidence
medium	Go Mod Replace Local	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v1.36.1-0.20260729145720-a2d8c7492908`	Review	10	2026-07-30
`v1.36.1-0.20260729034317-78e59f151126`	Review	10	2026-07-30
`v1.36.1-0.20260728043526-94c89e8656f4`	Review	10	2026-07-29
`v1.36.1-0.20260725064748-fef2e9021547`	Review	10	2026-07-27
`v1.36.1-0.20260721202742-265e9c04146a`	Review	10	2026-07-22
`v1.32.5-0.20250708203334-be90dcf23f5e`	Review	10	2026-07-22
`v1.36.1-0.20260721051241-f026b6a8f077`	Review	10	2026-07-22
`v1.32.5-0.20250709012830-8537c47af322`	Review	10	2026-07-22
`v1.36.1-0.20260720193525-cda6c96e69d3`	Review	10	2026-07-22
`v1.36.1-0.20260717024754-ce40001c657f`	Review	10	2026-07-18
`v1.36.1-0.20260716101059-06b771236679`	Review	10	2026-07-17
`v1.36.1-0.20260714071452-d98573518e98`	Review

Block this in CI

PkgRadar gates github.com/envoyproxy/go-control-plane/contrib (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/envoyproxy/go-control-plane/[email protected]