Go modules · proxy.golang.org

github.com/microsoft/retina/hack/tools/toolbox

Go Mod Replace Local

Why PkgRadar flagged v0.0.0-20260730160753-d0c1e11010a4

Severity	Signal	Evidence
medium	Go Mod Replace Local	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260730160753-d0c1e11010a4`	Review	10	2026-07-31
`v0.0.0-20260729155140-fcd9d4462fea`	Review	10	2026-07-30
`v0.0.0-20260729104114-335efa9b62cc`	Review	10	2026-07-30
`v0.0.0-20260729014647-e3e053c397ab`	Review	10	2026-07-30
`v0.0.0-20260728030501-6b94a4a7e59f`	Review	10	2026-07-29
`v0.0.0-20260724200436-4909dbc3f38e`	Review	10	2026-07-26
`v0.0.0-20260722064303-93a4a62876f4`	Review	10	2026-07-23
`v0.0.0-20260721165714-ebef469e0753`	Review	10	2026-07-22
`v0.0.0-20260719075853-e2f5c288da07`	Review	10	2026-07-20
`v0.0.0-20260718052639-0776f66701b5`	Review	10	2026-07-19
`v0.0.0-20260718024613-957a8fd43612`	Review	10	2026-07-19
`v0.0.0-20260717211047-5c1568c55f2c`	Review	10	2026-07-19

Block this in CI

PkgRadar gates github.com/microsoft/retina/hack/tools/toolbox (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/microsoft/retina/hack/tools/[email protected]