Go modules · proxy.golang.org

github.com/ijustyce/opentelemetry-collector-contrib/pkg/stanza

Go Mod Replace Local

Why PkgRadar flagged v0.147.1-0.20260728062222-249b397d5082

Severity	Signal	Evidence
medium	Go Mod Replace Local	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.147.1-0.20260728062222-249b397d5082`	Review	10	2026-07-29
`v0.147.1-0.20260728033836-98ab6a2ac892`	Review	10	2026-07-29
`v0.154.0`	Low risk	0	2026-07-07
`v0.153.0`	Low risk	0	2026-07-07
`v0.152.0`	Low risk	0	2026-07-07
`v0.151.0`	Low risk	0	2026-07-07
`v0.150.0`	Low risk	0	2026-07-07
`v0.149.0`	Low risk	0	2026-07-07
`v0.148.0`	Low risk	0	2026-07-07
`v0.147.0`	Low risk	0	2026-07-07
`v0.146.0`	Low risk	0	2026-07-07
`v0.145.0`	Low risk	0	2026-07-07
`v0.144.0`	Low risk	0	2026-07-07
`v0.143.0`	Low risk	0	2026-07-07
`v0.142.0`	Low risk

Block this in CI

PkgRadar gates github.com/ijustyce/opentelemetry-collector-contrib/pkg/stanza (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/ijustyce/opentelemetry-collector-contrib/pkg/[email protected]

Start free — 25 scans / mo View full evidence