PkgRadar

Go modules · proxy.golang.org

github.com/kubernetes-sigs/gateway-api/tools

Go Mod Replace Local: go.mod replace directive redirects to a local filesystem path — non-portable / dev-time only.

Why PkgRadar flagged v0.0.0-20260612201649-0ab1e072a2e7

SeveritySignalEvidence
mediumGo Mod Replace Localgo.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · github.com/kubernetes-sigs/gateway-api/[email protected]/go.mod

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260612201649-0ab1e072a2e7Review102026-06-13
v0.0.0-20260611161104-e8146da9e16cReview102026-06-12
v0.0.0-20260611121251-f037b151f2f0Review102026-06-12
v0.0.0-20260605220232-634aa7cb4fc7Review102026-06-08
v0.0.0-20260603215946-66339b25ef88Review102026-06-06
v0.0.0-20260530040447-124954708648Review102026-06-01
v0.0.0-20260527215245-e3aaefe20ed7Review102026-05-29

Block this in CI

PkgRadar gates github.com/kubernetes-sigs/gateway-api/tools (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/kubernetes-sigs/gateway-api/[email protected]