Go modules · proxy.golang.org

github.com/pulumi/pulumi-terraform-bridge/v3

Remote Payload, Go Mod Replace Local

Why PkgRadar flagged v3.134.1-0.20260722003220-41e7db9e64ff

Severity	Signal	Evidence
medium	Remote Payload	—
medium	Go Mod Replace Local	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v3.134.1-0.20260722003220-41e7db9e64ff`	Review	22	2026-07-23
`v3.134.1-0.20260720151533-5ffabd1227c9`	Review	22	2026-07-21
`v3.134.1-0.20260720150533-c1983fc2e214`	Review	22	2026-07-21
`v3.134.1-0.20260720140433-636bf6abeb6f`	Review	22	2026-07-21
`v3.134.1-0.20260720094300-c1411c57a287`	Review	22	2026-07-21
`v3.134.1-0.20260718045926-1ebfbea36871`	Review	22	2026-07-19
`v3.134.1-0.20260716201109-6c5d1b3f5efa`	Review	22	2026-07-17
`v3.134.1-0.20260716134826-e3d7cb9e43ea`	Review	22	2026-07-17
`v3.134.1-0.20260716092000-5656b53a859a`	Review	22	2026-07-17
`v3.134.1-0.20260714115759-6744a8e7082e`	Review	22	2026-07-16
`v3.134.1-0.20260711001210-668d5455b774`	Review	22	2026-07-15
`v3.134.0`	Review	22

Block this in CI

PkgRadar gates github.com/pulumi/pulumi-terraform-bridge/v3 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/pulumi/pulumi-terraform-bridge/[email protected]