Go modules · proxy.golang.org

github.com/gnolang/gno/contribs/gnobro

Go Mod Replace Local, Credential file access

Why PkgRadar flagged v0.0.0-20260726214318-b4d044acc817

Severity	Signal	Evidence
medium	Go Mod Replace Local	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260726214318-b4d044acc817`	Review	15	2026-07-27
`v0.0.0-20260725222351-cfcbaf484cd4`	Review	15	2026-07-26
`v0.0.0-20260720122938-d14a03770521`	Review	15	2026-07-21
`v0.0.0-20260717131417-959cefd91602`	Review	15	2026-07-18
`v0.0.0-20260717122901-c9ad5149fa88`	Review	15	2026-07-18
`v0.0.0-20260717115337-899bd7219de3`	Review	15	2026-07-18
`v0.0.0-20260717092550-27b5b8e244c3`	Review	15	2026-07-18
`v0.0.0-20260717081818-24088cf2c09b`	Review	15	2026-07-18
`v0.0.0-20260717032534-68111d9e6572`	Review	15	2026-07-18
`v0.0.0-20260716171459-d623488ac0d2`	Review	15	2026-07-17
`v0.0.0-20260716151545-42c8946c7163`	Review	15	2026-07-17
`v0.0.0-20260716145834-1f452318e1bb`	Review	15	2026-07-17

Block this in CI

PkgRadar gates github.com/gnolang/gno/contribs/gnobro (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/gnolang/gno/contribs/[email protected]