Go modules · proxy.golang.org

github.com/go-acme/lego/v5

Tls Verification Disabled, Remote Payload, Credential file access

Why PkgRadar flagged v5.3.2-0.20260721200326-a0e15c2daf87

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v5.3.2-0.20260721200326-a0e15c2daf87`	Review	65	2026-07-22
`v5.3.1`	Review	65	2026-07-22
`v5.3.1-0.20260721170257-8aadd3c62d3a`	Review	65	2026-07-22
`v5.3.0`	Review	65	2026-07-22
`v5.2.3-0.20260718232855-2a8fe3b2f11e`	Review	65	2026-07-22
`v5.0.0-20260529201220-254de53aacc8`	Review	65	2026-07-22
`v5.2.3-0.20260712061920-c7b207a10ca8`	Review	65	2026-07-14
`v5.2.3-0.20260616124016-601569240e81`	Review	65	2026-07-14
`v5.2.3-0.20260704214946-25d46b679679`	Review	65	2026-07-05
`v5.2.3-0.20260615142111-af599be299ba`	Review	3	2026-06-17
`v5.2.3-0.20260602134056-0142509ee09a`	Low risk	0	2026-06-03
`v5.2.2`	Low risk	0	2026-06-03
`v5.2.2-0.20260601013502-aa96e356ae16`

Block this in CI

PkgRadar gates github.com/go-acme/lego/v5 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/go-acme/lego/[email protected]