Go modules · proxy.golang.org

github.com/lf-edge/openbao

Tls Verification Disabled, Remote Payload, Go Mod Replace Local +2 more

Why PkgRadar flagged v0.0.0-20260630140719-bbe302eed8e8

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260713173904-2ee22c2b8ebe`	Review	63	2026-07-14
`v0.0.0-20260710074100-9e7d2ea975d7`	Review	63	2026-07-12
`v0.0.0-20260707234238-5244ebbe35a0`	Review	63	2026-07-09
`v0.0.0-20260703085919-35731cd1a3f6`	Review	63	2026-07-06
`v0.0.0-20260702182116-5ec5885218d4`	Review	63	2026-07-04
`v0.0.0-20260630140719-bbe302eed8e8`	High risk	45	2026-07-01
`v0.0.0-20260626200020-9a456b7f70bb`	Review	27	2026-06-28
`v0.0.0-20260625111008-50b845dc9abe`	Review	15	2026-06-26
`v0.0.0-20260625105431-e1366dd736a5`	Review	15	2026-06-26
`v0.0.0-20260625095012-3c3ede3b9fba`	Review	15	2026-06-26
`v0.0.0-20260625092003-de4f18a3a4db`	Review	15	2026-06-26
`v0.0.0-20260625084953-31044ea8edbc`	Review	15	2026-06-26

Block this in CI

PkgRadar gates github.com/lf-edge/openbao (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/lf-edge/[email protected]