Go modules · proxy.golang.org

github.com/nuonco/nuon/sdks/stack

Go Mod Replace Local

Why PkgRadar flagged v0.0.0-20260825052900-2587a24ad7aa

Severity	Signal	Evidence
medium	Go Mod Replace Local	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260825052900-2587a24ad7aa`	Review	10	2026-08-26
`v0.0.0-20260822165419-775a3567b005`	Low risk	0	2026-08-23
`v0.0.0-20260822165151-5926fde3d2c1`	Low risk	0	2026-08-23
`v0.0.0-20260818193810-eb2ea0e8a67a`	Low risk	0	2026-08-19
`v0.0.0-20260811205643-7bd80fab46cc`	Low risk	0	2026-08-13
`v0.0.0-20260811173153-b400b22b7495`	Low risk	0	2026-08-12
`v0.0.0-20260811170304-ebd6d1976e44`	Low risk	0	2026-08-12
`v0.0.0-20260811160929-9cc2cb6e8c54`	Low risk	0	2026-08-12
`v0.0.0-20260811151158-f89c9a63a198`	Low risk	0	2026-08-12
`v0.0.0-20260811144905-5bf583cc0d98`	Low risk	0	2026-08-12
`v0.0.0-20260806121912-4fb3074778e1`	Low risk	0	2026-08-07
`v0.0.0-20260806113832-10e7d7daf75b`	Low risk	0	2026-08-07

Block this in CI

PkgRadar gates github.com/nuonco/nuon/sdks/stack (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/nuonco/nuon/sdks/[email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.