PkgRadar

Go modules · proxy.golang.org

github.com/mattermost/mattermost-plugin-playbooks

Go Mod Replace Local: go.mod replace directive redirects to a local filesystem path — non-portable / dev-time only.

Why PkgRadar flagged v1.41.1-0.20260602180419-322bb109d045

SeveritySignalEvidence
mediumGo Mod Replace Localgo.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · github.com/mattermost/mattermost-plugin-playbooks@v1.41.1-0.20260602180419-322bb109d045/go.mod

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.41.1-0.20260602180419-322bb109d045Review102026-06-10
v1.41.1-0.20260119180806-19d1c56a2d7aReview102026-06-10
v1.41.1-0.20260601113316-7c520e3d0fc6Review102026-06-02
v1.41.1-0.20260213020129-e1d6ec2c94e6Review102026-06-02

Block this in CI

PkgRadar gates github.com/mattermost/mattermost-plugin-playbooks (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/mattermost/mattermost-plugin-playbooks@v1.41.1-0.20260602180419-322bb109d045