Go modules · proxy.golang.org

github.com/pulumi/pulumi/pkg/v3

Tls Verification Disabled, Remote Payload, Go Mod Replace Local +2 more

Why PkgRadar flagged v3.255.1-0.20260728162444-b43dfaf489d4

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v3.255.1-0.20260728162444-b43dfaf489d4`	Review	54	2026-07-29
`v3.255.0`	Review	54	2026-07-29
`v3.254.1-0.20260724172101-3cdff5d9a642`	Review	54	2026-07-26
`v3.36.1-0.20220721090416-23fe6d7b3c01`	Review	34	2026-07-26
`v3.254.1-0.20260724125056-04abe8500e50`	Review	54	2026-07-25
`v3.254.1-0.20260724112615-280839534c90`	Review	54	2026-07-25
`v3.253.1-0.20260720143735-73ab6caab0c8`	Review	54	2026-07-21
`v3.253.1-0.20260717205615-00947e2c1fad`	Review	54	2026-07-19
`v3.116.1-0.20240515162239-ab7acdb60250`	Review	46	2026-07-19
`v3.253.1-0.20260717102922-cd588358a197`	Review	54	2026-07-18
`v3.253.1-0.20260716194454-329f5543c0e9`	Review	54	2026-07-18
`v3.253.1-0.20260715124325-8a79286b3022`	Review	54

Block this in CI

PkgRadar gates github.com/pulumi/pulumi/pkg/v3 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/pulumi/pulumi/pkg/[email protected]