PkgRadar

Go modules · proxy.golang.org

github.com/nvidia/infra-controller/rest-api

Go Mod Replace Local: go.mod replace directive redirects to a local filesystem path — non-portable / dev-time only.

Why PkgRadar flagged v0.0.0-20260603004519-b91cb44f5415

SeveritySignalEvidence
mediumGo Mod Replace Localgo.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · github.com/nvidia/infra-controller/[email protected]/go.mod

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260603004519-b91cb44f5415Review102026-06-04
v0.0.0-20260603003858-3cd8416009b5Review102026-06-04
v0.0.0-20260603003334-d4028f2713bbReview102026-06-04
v0.0.0-20260603003147-aee8a1594b60Review102026-06-04
v0.0.0-20260603001753-d2dc5f768f19Review102026-06-04
v0.0.0-20260602235625-f03631e125b4Review102026-06-04

Block this in CI

PkgRadar gates github.com/nvidia/infra-controller/rest-api (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/nvidia/infra-controller/[email protected]