PkgRadar

Go modules · proxy.golang.org

github.com/kubeflow/model-registry

Remote Payload: matched "curl "

Why PkgRadar flagged v0.2.7-alpha.0.20260611162757-e6f94485f9c4

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/kubeflow/[email protected]/catalog/internal/catalog/basecatalog/license_names.go
mediumGo Mod Replace Localgo.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · github.com/kubeflow/[email protected]/go.mod

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.2.7-alpha.0.20260611162757-e6f94485f9c4Review312026-06-12
v0.0.0-20260611162757-e6f94485f9c4Review312026-06-12
v0.2.7-alpha.0.20260610140431-aac47df7b96aReview312026-06-11
v0.0.0-20260610111004-6e9c47c5c6ddReview312026-06-11
v0.0.0-20260609205526-cc51e0b894c3Review312026-06-10
v0.0.0-20260609181850-1ba1925a4c50Review312026-06-10
v0.2.7-alpha.0.20260609181850-1ba1925a4c50Review312026-06-10
v0.0.0-20260609180610-40fbe26feb3fReview312026-06-10
v0.0.0-20260608161331-51d089d03c5bReview312026-06-09
v0.2.7-alpha.0.20260608143400-6ba366d051a4Review312026-06-09
v0.0.0-20260608143400-6ba366d051a4Review312026-06-09
v0.2.7-alpha.0.20260608084143-a0f8d69238feReview312026-06-09
v0.0.0-20260608084143-a0f8d69238feReview312026-06-09
v0.2.7-alpha.0.20260605143628-b70fd392b5cbReview312026-06-06
v0.0.0-20260605143628-b70fd392b5cbReview312026-06-06
v0.0.0-20260604114801-5e057cc03b91Review312026-06-05
v0.2.7-alpha.0.20260604074317-70a7b0cfd208Review312026-06-05
v0.0.0-20260604074317-70a7b0cfd208Review312026-06-05
v0.0.0-20260603152947-86aa2cf65424Review312026-06-04
v0.2.7-alpha.0.20260603122705-81b2b7a860f3Review312026-06-04
v0.0.0-20260603105253-7a276562f08fReview312026-06-04
v0.2.7-alpha.0.20260602143802-4c2c3b666140Review312026-06-03
v0.0.0-20260602143802-4c2c3b666140Review312026-06-03
v0.2.7-alpha.0.20260601124344-ac3211e38fe0Review312026-06-02
v0.0.0-20260601124344-ac3211e38fe0Review312026-06-02
v0.2.7-alpha.0.20260601103538-966eb6520bf6Review312026-06-02
v0.0.0-20260601103538-966eb6520bf6Review312026-06-02
v0.2.7-alpha.0.20260529211312-4443311d064cReview312026-05-30
v0.2.7-alpha.0.20260529191021-aa19828f031aReview312026-05-30
v0.0.0-20260529191021-aa19828f031aReview312026-05-30
v0.2.7-alpha.0.20260529122933-675ad5c0fc43Review312026-05-30
v0.0.0-20260529122933-675ad5c0fc43Review312026-05-30
v0.2.7-alpha.0.20260528143807-f07ab21d208dReview312026-05-29
v0.0.0-20260528143807-f07ab21d208dReview312026-05-29

Block this in CI

PkgRadar gates github.com/kubeflow/model-registry (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/kubeflow/[email protected]