Go modules · proxy.golang.org

github.com/karimra/gnmic

Tls Verification Disabled

Why PkgRadar flagged v0.2.4-0.20200924084522-2aa5bcccd274

Severity	Signal	Evidence
medium	Tls Verification Disabled	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.2.4-0.20200923092056-0459b1e6c328`	Low risk	0	2026-08-24
`v0.2.4-0.20200924084522-2aa5bcccd274`	Review	12	2026-08-24
`v0.1.2-0.20200803014415-23e82f4e2f04`	Low risk	0	2026-08-24
`v0.1.2-0.20200803075412-dbbf1dcbfb9f`	Low risk	0	2026-08-24
`v0.1.2-0.20200804234828-a3f29ca81b87`	Low risk	0	2026-08-24
`v0.3.1-0.20201008060622-243b33e08439`	Review	12	2026-08-06
`v0.3.1-0.20201006092937-7dd0f133e65e`	Review	12	2026-08-06
`v0.3.1-0.20201006085707-6111ebae3316`	Review	12	2026-08-06
`v0.3.1-0.20201006085604-736e4f356a65`	Review	12	2026-08-06
`v0.3.1-0.20201005055857-3ba799bc1c40`	Review	12	2026-08-06
`v0.3.1-0.20201005052947-aed56dfd374c`	Review	12	2026-08-06
`v0.2.4-0.20201005020526-a4fbfded0c3b`	Low risk

Block this in CI

PkgRadar gates github.com/karimra/gnmic (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/karimra/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.