Go modules · proxy.golang.org

github.com/kaleido-io/paladin/domains/noto

Go Mod Replace Local

Why PkgRadar flagged v0.0.0-20260729093609-87df7b03e759

Severity	Signal	Evidence
medium	Go Mod Replace Local	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260729093609-87df7b03e759`	Review	10	2026-08-04
`v0.0.0-20260724181202-6dd363191ab8`	Review	10	2026-07-27
`v0.0.0-20260713123659-a856bbe9a421`	Review	10	2026-07-16
`v0.0.0-20260708152749-11cbdb58ed01`	Review	10	2026-07-09
`v0.0.0-20260701104653-0feaf5244ffd`	Review	4	2026-07-03
`v0.0.0-20260625111732-cc4dd635523d`	Low risk	0	2026-06-26
`v0.0.0-20260624114538-dc57681a2ac6`	Low risk	0	2026-06-26
`v0.0.0-20260619194915-70e4e5588572`	Low risk	0	2026-06-21

Block this in CI

PkgRadar gates github.com/kaleido-io/paladin/domains/noto (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/kaleido-io/paladin/domains/[email protected]