Go modules · proxy.golang.org

github.com/getlantern/lantern-box

Tls Verification Disabled

Why PkgRadar flagged v0.0.96-0.20260622145128-fb8f4d04d83c

Severity	Signal	Evidence
medium	Tls Verification Disabled	github.com/getlantern/[email protected]/protocol/reflex/inbound.go
medium	Tls Verification Disabled	github.com/getlantern/[email protected]/protocol/unbounded/outbound.go

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.96-0.20260622145128-fb8f4d04d83c`	Review	24	2026-06-24
`v0.0.95`	Low risk	0	2026-06-19
`v0.0.94`	Low risk	0	2026-06-19
`v0.0.92`	Low risk	0	2026-06-17
`v0.0.91`	Low risk	0	2026-06-17
`v0.0.90`	Low risk	0	2026-06-16
`v0.0.88`	Low risk	0	2026-06-03
`v0.0.87`	Low risk	0	2026-06-02
`v0.0.87-0.20260529194033-626ecc2a9981`	Low risk	0	2026-05-30
`v0.0.87-0.20260529195337-0b63c0f42962`	Low risk	0	2026-05-30
`v0.0.85`	Low risk	0	2026-05-30
`v0.0.85-0.20260528223825-85df3357f317`	Low risk	0	2026-05-30

Block this in CI

PkgRadar gates github.com/getlantern/lantern-box (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/getlantern/[email protected]