Go modules · proxy.golang.org

github.com/kelseyhightower/confd

Tls Verification Disabled

Why PkgRadar flagged v0.9.1-0.20150426154627-7f59d5050f76

Severity	Signal	Evidence
medium	Tls Verification Disabled	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.12.0-alpha3.0.20170517155944-d7df09fe2742`	Low risk	0	2026-07-19
`v0.12.0-alpha3.0.20160519205429-3bfa5b2a3150`	Low risk	0	2026-07-18
`v0.9.1-0.20150426154627-7f59d5050f76`	Review	12	2026-07-14
`v0.9.1-0.20150619171235-70cf76acd32f`	Low risk	0	2026-07-14
`v0.9.1-0.20150527134237-34a0ff7a54a9`	Low risk	0	2026-07-14
`v0.10.1-0.20151130214420-b01f02ad8f46`	Low risk	0	2026-07-11
`v0.8.1-0.20150311205022-f84b57dae136`	Review	12	2026-07-10
`v0.10.1-0.20150713140558-0dd4c53a303a`	Low risk	0	2026-06-28
`v0.9.1-0.20150512200907-fed32feac4a1`	Low risk	0	2026-06-28
`v0.9.1-0.20150410172006-761e91b4c8e7`	Low risk	0	2026-06-24
`v0.9.1-0.20150410051911-cd94b72a59de`	Low risk	0	2026-06-24

Block this in CI

PkgRadar gates github.com/kelseyhightower/confd (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/kelseyhightower/[email protected]