Go modules · proxy.golang.org

github.com/grafana/alloy/collector

Go Mod Replace Local

Why PkgRadar flagged v0.0.0-20260721212040-f0e5549b3cfe

Severity	Signal	Evidence
medium	Go Mod Replace Local	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260721212040-f0e5549b3cfe`	Review	10	2026-07-22
`v0.0.0-20260721202027-9772d974449b`	Review	10	2026-07-22
`v0.0.0-20260721185215-024d22432ebc`	Review	10	2026-07-22
`v0.0.0-20260721180805-1a9ed956fa34`	Review	10	2026-07-22
`v0.0.0-20260721170754-61ec3d295873`	Review	10	2026-07-22
`v0.0.0-20260717073445-69cd783eb474`	Review	10	2026-07-19
`v0.0.0-20260716155800-5ab0b0652c92`	Review	10	2026-07-17
`v0.0.0-20260715171249-1b966056039b`	Review	10	2026-07-16
`v0.0.0-20260714072317-377f1d0046e0`	Review	10	2026-07-15
`v0.0.0-20260713160423-c00551b59f7e`	Review	10	2026-07-15
`v0.0.0-20260710231704-a473efe2b676`	Review	10	2026-07-12
`v0.0.0-20260708194820-dbe47e925cfd`	Review	10	2026-07-09

Block this in CI

PkgRadar gates github.com/grafana/alloy/collector (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/grafana/alloy/[email protected]