Loading the latest scan…
Go modules · proxy.golang.org
Tls Verification Disabled, Go Mod Replace Local, Credential file access
Why PkgRadar flagged v3.4.4-0.20260727162132-30438547edc1
| Severity | Signal | Evidence |
|---|---|---|
| medium | Tls Verification Disabled | — |
| medium | Go Mod Replace Local | — |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v3.4.4-0.20260727162132-30438547edc1 | Review | 32 | 2026-07-30 |
v3.4.3 | Review | 32 | 2026-07-30 |
v3.4.2 | Review | 32 | 2026-07-26 |
v3.3.0 | Review | 27 | 2026-07-23 |
v3.3.1 | Review | 27 | 2026-07-23 |
v3.4.2-0.20260720235536-014591e49b32 | Review | 32 | 2026-07-22 |
v3.4.1 | Review | 32 | 2026-07-22 |
v3.4.1-0.20260714162043-b1b35f90e181 | Review | 27 | 2026-07-15 |
v3.4.0 | Review | 27 | 2026-07-15 |
v3.3.3-0.20260706151607-7a6ba7e11bd1 | Review | 27 | 2026-07-10 |
v3.3.2 | Review | 27 | 2026-07-10 |
v3.0.0-20260531185043-1679095f4c45 | Low risk | 0 | 2026-06-03 |
v3.2.0 | Low risk | 0 | 2026-06-03 |
Block this in CI
pkgradar gate --ecosystem go github.com/mitre/hdf-libs/hdf-cli/[email protected]