Go modules · proxy.golang.org

github.com/gogf/gf/v2

Tls Verification Disabled

Why PkgRadar flagged v2.8.3-0.20241217131554-f79aef666917

Severity	Signal	Evidence
medium	Tls Verification Disabled	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v2.8.3-0.20241217131554-f79aef666917`	Review	12	2026-08-25
`v2.10.3-0.20260820105207-c8bdbb77fae2`	Review	12	2026-08-21
`v2.10.3-0.20260820095112-2c9645b54160`	Review	12	2026-08-21
`v2.10.3-0.20260817092843-9edefe99161b`	Review	12	2026-08-18
`v2.10.3-0.20260807080553-41baf1e281a7`	Review	12	2026-08-10
`v2.10.3-0.20260806093422-37f241a43b44`	Review	12	2026-08-07
`v2.10.3-0.20260805093505-a24b121b2eb1`	Review	12	2026-08-06
`v2.10.3-0.20260801110435-d08a238c2e3f`	Review	12	2026-08-03
`v2.10.3-0.20260731084832-a9e4a9405318`	Review	12	2026-08-01
`v2.10.3-0.20260728090748-0f13913cad18`	Review	12	2026-07-31
`v2.10.2-0.20260514080016-9a91bd203b9f`	Review	1	2026-07-20
`v2.9.8-0.20260120112523-f3f2cb3c578a`	Low risk

Block this in CI

PkgRadar gates github.com/gogf/gf/v2 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/gogf/gf/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.