Go modules · proxy.golang.org

github.com/jvdm/quay-claircore

Go Mod Replace Local

Why PkgRadar flagged v1.5.53-0.20260717023727-f9100d9c6252

Severity	Signal	Evidence
medium	Go Mod Replace Local	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v1.5.53-0.20260717023727-f9100d9c6252`	Review	10	2026-07-18
`v1.5.53-0.20260716202259-64efe8a51b32`	Review	10	2026-07-17
`v1.5.53-0.20260715194128-017bffef948b`	Review	10	2026-07-16
`v1.5.53-0.20260701210916-c43edc96a137`	Review	10	2026-07-02
`v1.5.53-0.20260623193534-e28c19695107`	Low risk	0	2026-06-24
`v1.5.53-0.20260617221800-954242a5cda5`	Low risk	0	2026-06-19
`v1.5.53-0.20260604003850-c86425789d93`	Low risk	0	2026-06-05
`v1.5.53-0.20260603062451-36cb79bf7e15`	Low risk	0	2026-06-04
`v1.5.53-0.20260601155537-11f50838da39`	Low risk	0	2026-06-03
`v1.5.53-0.20260602012648-c942d87486c6`	Low risk	0	2026-06-03

Block this in CI

PkgRadar gates github.com/jvdm/quay-claircore (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/jvdm/[email protected]