Go modules · proxy.golang.org

github.com/platform-engineering-labs/formae/pkg/plugin

Go Mod Replace Local

Why PkgRadar flagged v0.4.2-0.20260731045128-f090485b51fa

Severity	Signal	Evidence
medium	Go Mod Replace Local	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.4.2-0.20260731045128-f090485b51fa`	Review	10	2026-08-01
`v0.0.0-20260731045128-f090485b51fa`	Review	10	2026-08-01
`v0.4.2-0.20260730213821-f069a1446744`	Review	10	2026-07-31
`v0.0.0-20260730213821-f069a1446744`	Review	10	2026-07-31
`v0.4.2-0.20260730182018-48f5a9181204`	Review	10	2026-07-31
`v0.0.0-20260730182018-48f5a9181204`	Review	10	2026-07-31
`v0.4.2-0.20260728162634-e0e7e473f40d`	Review	10	2026-07-29
`v0.0.0-20260728162634-e0e7e473f40d`	Review	10	2026-07-29
`v0.4.2-0.20260727225600-2b4a8cc3ea4c`	Review	10	2026-07-28
`v0.0.0-20260727225600-2b4a8cc3ea4c`	Review	10	2026-07-28
`v0.4.2-0.20260727211624-3cf252ce89e2`	Review	10	2026-07-28
`v0.0.0-20260727211624-3cf252ce89e2`	Review	10

Block this in CI

PkgRadar gates github.com/platform-engineering-labs/formae/pkg/plugin (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/platform-engineering-labs/formae/pkg/[email protected]