Go modules · proxy.golang.org

github.com/mercari/grpc-federation

Tls Verification Disabled, Obfuscation Density

Why PkgRadar flagged v1.26.1-0.20260622070309-7284d1455173

Severity	Signal	Evidence
medium	Tls Verification Disabled	github.com/mercari/[email protected]/grpc/federation/net/net.go

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v1.26.1-0.20260622070309-7284d1455173`	Review	12	2026-06-23
`v1.26.1-0.20260616021508-da1d6d1d4760`	Low risk	0	2026-06-17
`v1.26.1-0.20260608041826-f502ea55fdb2`	Low risk	0	2026-06-09
`v1.26.1-0.20260608023844-36fac68577fd`	Low risk	0	2026-06-09
`v1.26.1-0.20260608023537-4c2729a562f6`	Low risk	0	2026-06-09
`v1.26.1-0.20260608020125-8c2a8f130f56`	Low risk	0	2026-06-09
`v1.26.1-0.20260608010621-45d16e0225c2`	Low risk	0	2026-06-09
`v1.26.1-0.20260604022830-86fbfa043a39`	Low risk	0	2026-06-06

Block this in CI

PkgRadar gates github.com/mercari/grpc-federation (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/mercari/[email protected]