PkgRadar

Go modules · proxy.golang.org

github.com/hmchangw/chat

Tls Verification Disabled: matched "InsecureSkipVerify: true"

Why PkgRadar flagged v0.0.0-20260618051356-ced841e9f99b

SeveritySignalEvidence
mediumTls Verification Disabledmatched "InsecureSkipVerify: true" · github.com/hmchangw/[email protected]/pkg/drive/uploader.go
mediumTls Verification Disabledmatched "InsecureSkipVerify: true" · github.com/hmchangw/[email protected]/pkg/oidc/oidc.go
mediumTls Verification Disabledmatched "InsecureSkipVerify: true" · github.com/hmchangw/[email protected]/pkg/searchengine/factory.go

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260618051356-ced841e9f99bReview362026-06-20
v0.0.0-20260617102934-f6576fc6c995Low risk02026-06-18
v0.0.0-20260617003405-2b8c44f82bf8Low risk02026-06-18
v0.0.0-20260616073845-e12cac789234Low risk02026-06-17
v0.0.0-20260616070830-92df6b4d782bLow risk02026-06-17
v0.0.0-20260616063737-0692e64cc203Low risk02026-06-17
v0.0.0-20260615074754-7e96fdbee1faLow risk02026-06-16
v0.0.0-20260615000821-4ab5eff0900dLow risk02026-06-16
v0.0.0-20260614091155-821e6b4bcd20Low risk02026-06-15
v0.0.0-20260607060144-622618d486cdLow risk02026-06-08

Block this in CI

PkgRadar gates github.com/hmchangw/chat (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/hmchangw/[email protected]