Go modules · proxy.golang.org

github.com/gitpod-io/gitpod/install/installer

Tls Verification Disabled, Remote Payload, Go Mod Replace Local

Why PkgRadar flagged v0.0.0-20260824085129-ab06f2f7c832

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260824085129-ab06f2f7c832`	Review	46	2026-08-25
`v0.0.0-20221005083521-389f7767fbd4`	Review	34	2026-08-15
`v0.0.0-20220826110303-e4b64d73244c`	Review	34	2026-08-15
`v0.0.0-20220727140726-4bed45cddbd1`	Review	34	2026-08-15
`v0.0.0-20221027100656-3c4b37e0f2ea`	Review	34	2026-08-15
`v0.0.0-20221121145307-9925027ba701`	Review	34	2026-08-15
`v0.0.0-20260810132008-c799283ee76d`	Review	46	2026-08-11
`v0.0.0-20260803052025-ea540de71f27`	Review	46	2026-08-04
`v0.0.0-20260728104624-6696bca6cdea`	Review	19	2026-07-29
`v0.0.0-20260727120121-c60385620251`	Review	16	2026-07-28
`v0.0.0-20260724083927-4f45d02eac95`	Review	11	2026-07-25
`v0.0.0-20260720135537-4abe2954b5e4`	Review	4	2026-07-21

Block this in CI

PkgRadar gates github.com/gitpod-io/gitpod/install/installer (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/gitpod-io/gitpod/install/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.