PkgRadar

Go modules · proxy.golang.org

github.com/mattermost/mattermost-plugin-calls

Go Mod Replace Local: go.mod replace directive redirects to a local filesystem path — non-portable / dev-time only.

Why PkgRadar flagged v0.0.0-20240308220435-d21f4da5f04e

SeveritySignalEvidence
mediumGo Mod Replace Localgo.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · github.com/mattermost/[email protected]/go.mod

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20240308220435-d21f4da5f04eReview102026-06-19
v0.24.1-0.20240308220435-d21f4da5f04eReview102026-06-19
v1.12.0Low risk02026-06-17
v0.0.0-20260612200212-afcfe15f34d0Low risk02026-06-13
v1.12.0-rc8Low risk02026-06-11
v1.12.0-rc6.0.20260603135333-d4ab74871f61Low risk02026-06-04
v0.0.0-20260603135333-d4ab74871f61Low risk02026-06-04
v0.0.0-20260601122134-3394f2d71fdcLow risk02026-06-02
v1.12.0-rc6.0.20260601122134-3394f2d71fdcLow risk02026-06-02
v1.11.1-0.20251229191112-d48893c8558eLow risk02026-06-02
v0.0.0-20260528192931-8da6898cdf3bLow risk02026-05-30
v1.12.0-rc6.0.20260528192931-8da6898cdf3bLow risk02026-05-29
v1.12.0-rc6Low risk02026-05-29

Block this in CI

PkgRadar gates github.com/mattermost/mattermost-plugin-calls (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/mattermost/[email protected]
Start free — 25 scans / moView full evidence