Go modules · proxy.golang.org

github.com/rdkcentral/xconfwebconfig

Tls Verification Disabled, Credential file access

Why PkgRadar flagged v1.0.35

Severity	Signal	Evidence
medium	Tls Verification Disabled	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v1.0.35`	Review	17	2026-07-29
`v0.0.0-20260727053927-f7f549f66a5b`	Review	17	2026-07-28
`v0.0.0-20260724224556-f783653aba53`	Review	17	2026-07-26
`v0.0.0-20260724175308-32491eeea8a8`	Review	17	2026-07-25
`v0.0.0-20260724170144-ad748627ab15`	Review	17	2026-07-25
`v0.0.0-20260724155337-b9a87d3bc6f0`	Review	17	2026-07-25
`v0.0.0-20260720063056-dd13c31b666b`	Review	17	2026-07-21
`v1.0.34`	Review	17	2026-07-21
`v0.0.0-20260719142639-db452a1608d4`	Review	17	2026-07-20
`v0.0.0-20260715060721-608a07e6e0c6`	Review	17	2026-07-16
`v0.0.0-20260714214440-5538a0dee119`	Review	17	2026-07-15
`v0.0.0-20260714221818-146cd7295e13`	Review	17	2026-07-15
`v0.0.0-20260714152510-c1600928ee04`

Block this in CI

PkgRadar gates github.com/rdkcentral/xconfwebconfig (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/rdkcentral/[email protected]