Go modules · proxy.golang.org

github.com/gobuffalo/pop

Tls Verification Disabled

Why PkgRadar flagged v0.0.0-20180727184552-8ce7204c9f99

Severity	Signal	Evidence
medium	Tls Verification Disabled	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v3.38.1-0.20171001175048-4f37627320b8+incompatible`	Low risk	0	2026-08-24
`v0.0.0-20180727184552-8ce7204c9f99`	Review	12	2026-08-23
`v0.0.0-20181113193738-79809517c697`	Review	12	2026-08-12
`v4.5.10-0.20180524161724-d5d017d59cf2+incompatible`	Review	12	2026-08-09
`v0.0.0-20180616192850-919d7f4c8cbf`	Low risk	0	2026-07-29
`v0.0.0-20180710054921-18ac907c1e8f`	Review	3	2026-07-25
`v4.0.0-20180318153727-a5f321ea81d1+incompatible`	Low risk	0	2026-07-15

Block this in CI

PkgRadar gates github.com/gobuffalo/pop (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/gobuffalo/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.