Go modules · proxy.golang.org

github.com/pulumi/pulumi-postgresql/provider/v3

Go Mod Replace Local

Why PkgRadar flagged v3.0.0-20260725071851-afc876973071

Severity	Signal	Evidence
medium	Go Mod Replace Local	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v3.0.0-20260725071851-afc876973071`	Review	10	2026-07-26
`v3.0.0-20260716141723-b57d264d8aee`	Review	10	2026-07-17
`v3.0.0-20260711071342-fb49376bbd4e`	Review	10	2026-07-12
`v3.0.0-20260710115338-a9a11e2f776c`	Review	10	2026-07-11
`v3.0.0-20260709075711-7991a0bed533`	Review	10	2026-07-10
`v3.0.0-20260705072857-fe798818ea8b`	Review	10	2026-07-06
`v3.0.0-20260702073455-dbe5f43c8727`	Review	10	2026-07-03
`v3.0.0-20260627072423-8d8cdfd9698e`	Review	10	2026-06-29
`v3.0.0-20260626073611-571fd33383a2`	Review	8	2026-06-28
`v3.0.0-20260620073252-bcc1238ef562`	Review	3	2026-06-21
`v3.0.0-20260614073622-1670157af400`	Low risk	0	2026-06-16
`v3.0.0-20260605073515-1a9ad47f9e85`	Low risk	0	2026-06-07

Block this in CI

PkgRadar gates github.com/pulumi/pulumi-postgresql/provider/v3 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/pulumi/pulumi-postgresql/provider/[email protected]