PkgRadar

Go modules · proxy.golang.org

github.com/open-policy-agent/opa/e2e

Go Mod Replace Local: go.mod replace directive redirects to a local filesystem path — non-portable / dev-time only.

Why PkgRadar flagged v0.0.0-20260615060539-3b8e2d595ba1

SeveritySignalEvidence
mediumGo Mod Replace Localgo.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · github.com/open-policy-agent/opa/[email protected]/go.mod

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260615060539-3b8e2d595ba1Review102026-06-16
v0.0.0-20260612092259-966990ccbfb0Review102026-06-13
v0.0.0-20260611143112-34167e2d86deReview102026-06-12
v0.0.0-20260611132317-ffd7d46ee475Review102026-06-12
v0.0.0-20260610133935-532cf8c880dcReview102026-06-11
v0.0.0-20260608123643-daf5d9799179Review102026-06-09
v0.0.0-20260604154707-850f198d09f3Review102026-06-05
v0.0.0-20260604125139-eb8166fb1cbfReview102026-06-05
v0.0.0-20260603150951-2a41f710e1c2Review102026-06-04
v0.0.0-20260602102538-c5f72447e534Review102026-06-03
v0.0.0-20260601194259-630860919522Review102026-06-02
v0.0.0-20260601123658-98944a4f44dfReview102026-06-02
v0.0.0-20260528074916-1661f22ba399Review102026-05-29
v0.0.0-20260528071833-4ce3991901eeReview102026-05-29
v0.0.0-20260528065339-41df8df4a26dReview102026-05-29
v0.0.0-20260527063951-4e1f9e8100c4Review102026-05-29

Block this in CI

PkgRadar gates github.com/open-policy-agent/opa/e2e (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/open-policy-agent/opa/[email protected]
Start free — 25 scans / moView full evidence