Go modules · proxy.golang.org

github.com/hashicorp/boundary

Remote Payload, Tls Verification Disabled, Go Mod Replace Local +1 more

Why PkgRadar flagged v0.0.0-20260708165146-a1e2c87b8a14

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260708165146-a1e2c87b8a14`	Review	63	2026-07-15
`v0.18.1-0.20260708165146-a1e2c87b8a14`	Review	63	2026-07-09
`v0.10.1-0.20230109173513-a403b3904cdc`	Review	63	2026-07-05
`v0.0.0-20260603200939-9df1fad7d0af`	Review	33	2026-06-18
`v0.18.1-0.20260603200939-9df1fad7d0af`	Review	33	2026-06-18
`v0.18.1-0.20260609134426-b495fe653bb0`	Review	33	2026-06-18
`v0.0.0-20260609134426-b495fe653bb0`	Review	33	2026-06-18
`v0.18.1-0.20260526185358-42ffd37ec26f`	Low risk	0	2026-05-29
`v0.0.0-20260428161827-95ea37aab9bb`	Low risk	0	2026-05-29
`v0.0.0-20260526185358-42ffd37ec26f`	Low risk	0	2026-05-29
`v0.0.0-20260428171207-8c9715c86853`	Low risk	0	2026-05-29
`v0.0.0-20260428160718-246bd8af47e1`	Low risk	0

Block this in CI

PkgRadar gates github.com/hashicorp/boundary (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/hashicorp/[email protected]