Go modules · proxy.golang.org

github.com/hashicorp/nomad

Remote Payload, Tls Verification Disabled, Go Mod Replace Local +2 more

Why PkgRadar flagged v1.11.0-rc.1.0.20260716204536-d4a17d26a66d

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v1.11.0-rc.1.0.20260716204536-d4a17d26a66d`	Review	71	2026-07-17
`v0.0.0-20260716204536-d4a17d26a66d`	Review	71	2026-07-17
`v1.11.0-rc.1.0.20260716180346-e328cf5e1a1b`	Review	71	2026-07-17
`v0.0.0-20260716180346-e328cf5e1a1b`	Review	71	2026-07-17
`v1.11.0-rc.1.0.20260715233341-16d846f15c73`	Review	71	2026-07-17
`v0.0.0-20260715233341-16d846f15c73`	Review	71	2026-07-17
`v1.11.0-rc.1.0.20260714123411-0846ba661f65`	Review	71	2026-07-15
`v0.0.0-20260714123411-0846ba661f65`	Review	71	2026-07-15
`v0.0.0-20210512184121-45527cb3ca40`	Review	25	2026-07-13
`v1.11.0-rc.1.0.20260710225221-a76ff571b41f`	Review	71	2026-07-11
`v0.0.0-20260710225221-a76ff571b41f`	Review	71	2026-07-11
`v1.11.0-rc.1.0.20260710170217-f0bee4ff7a27`	Review

Block this in CI

PkgRadar gates github.com/hashicorp/nomad (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/hashicorp/[email protected]