PkgRadar

Go modules · proxy.golang.org

github.com/invakid404/baml-rest/workerplugin

Go Mod Replace Local: go.mod replace directive redirects to a local filesystem path — non-portable / dev-time only.

Why PkgRadar flagged v0.0.48-0.20260608190305-690045c24a6c

SeveritySignalEvidence
mediumGo Mod Replace Localgo.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · github.com/invakid404/baml-rest/[email protected]/go.mod

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.48-0.20260608190305-690045c24a6cReview102026-06-09
v0.0.0-20260608190305-690045c24a6cReview102026-06-09
v0.0.48-0.20260608170512-4699f198ef0aReview102026-06-09
v0.0.0-20260608170512-4699f198ef0aReview102026-06-09
v0.0.48-0.20260608071314-0badf81bbb03Review102026-06-09
v0.0.0-20260608071314-0badf81bbb03Review102026-06-09
v0.0.48-0.20260607084010-73c7be267afaReview102026-06-08
v0.0.0-20260607084010-73c7be267afaReview102026-06-08
v0.0.48-0.20260606201751-4f5ad8eb4b67Review102026-06-07
v0.0.0-20260606201751-4f5ad8eb4b67Review102026-06-07
v0.0.48-0.20260606185339-bf5712282085Review102026-06-07
v0.0.0-20260606185339-bf5712282085Review102026-06-07
v0.0.48-0.20260606143337-f8d0cd33b361Review102026-06-07
v0.0.0-20260606143337-f8d0cd33b361Review102026-06-07
v0.0.48-0.20260605132913-7e679d9af705Review102026-06-07
v0.0.0-20260605132913-7e679d9af705Review102026-06-07
v0.0.48-0.20260604130210-7fd3c2886aa3Review102026-06-06
v0.0.0-20260604130210-7fd3c2886aa3Review102026-06-06
v0.0.48-0.20260603111118-fd3b071fbec0Review102026-06-04
v0.0.0-20260603093842-58ba6204b624Review102026-06-04
v0.0.48-0.20260603081805-3a3de76c9a7bReview102026-06-04
v0.0.0-20260603081805-3a3de76c9a7bReview102026-06-04
v0.0.0-20260602130205-2a9240ce37d9Review102026-06-03
v0.0.48-0.20260602073417-c21f96c050f9Review102026-06-03
v0.0.0-20260602073417-c21f96c050f9Review102026-06-03
v0.0.48-0.20260601165814-6e9d65559e95Review102026-06-02
v0.0.0-20260601165814-6e9d65559e95Review102026-06-02
v0.0.48-0.20260601132356-ad602ea7d6e8Review102026-06-02
v0.0.0-20260601132356-ad602ea7d6e8Review102026-06-02
v0.0.48-0.20260531163550-f31749a1f85dReview102026-06-01
v0.0.0-20260531163550-f31749a1f85dReview102026-06-01
v0.0.48-0.20260530154039-aa0d0db219d6Review102026-05-31
v0.0.0-20260530154039-aa0d0db219d6Review102026-05-31
v0.0.48-0.20260530133037-e5714e6e7dd6Review102026-05-31
v0.0.0-20260530133037-e5714e6e7dd6Review102026-05-31
v0.0.48-0.20260528091556-8a5ff70e1e98Review102026-05-31
v0.0.0-20260528091556-8a5ff70e1e98Review102026-05-31

Block this in CI

PkgRadar gates github.com/invakid404/baml-rest/workerplugin (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/invakid404/baml-rest/[email protected]