PkgRadar

Go modules · proxy.golang.org

github.com/semaphoreui/semaphore/pro

Go Mod Replace Local: go.mod replace directive redirects to a local filesystem path — non-portable / dev-time only.

Why PkgRadar flagged v0.0.0-20260612073610-ae3a310cb235

SeveritySignalEvidence
mediumGo Mod Replace Localgo.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · github.com/semaphoreui/semaphore/[email protected]/go.mod

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260612073610-ae3a310cb235Review102026-06-13
v0.0.0-20260611151612-3ff261a171f8Review102026-06-12
v0.0.0-20260611115004-13388449572eReview102026-06-12
v0.0.0-20260611091852-de07aeda7cfcReview102026-06-12
v0.0.0-20260610210947-33c4b569ee79Review102026-06-11
v0.0.0-20260610140034-9f21856ee846Review102026-06-11
v0.0.0-20260608204800-946258d9f87aReview102026-06-09
v0.0.0-20260608143819-01f2e61b0999Review102026-06-09
v0.0.0-20260607200230-427c34c440b3Review102026-06-08
v0.0.0-20260607195709-3f03b9623f5eReview102026-06-08
v0.0.0-20260607180706-b92ec94b86a3Review102026-06-08
v0.0.0-20260607132036-bd3d832ce154Review102026-06-08
v0.0.0-20260607125943-ae86c0c927deReview102026-06-08
v0.0.0-20260606102041-af0889f2a331Review102026-06-07
v0.0.0-20260605170017-2443024f09b4Review102026-06-06
v0.0.0-20260603194830-42e6c00dfad7Review102026-06-04
v0.0.0-20260602170009-459ccee8ee67Review102026-06-03
v0.0.0-20260531194331-469002aa5123Review102026-06-01
v0.0.0-20260531182239-425030914e4bReview102026-06-01
v0.0.0-20260530191333-ff963e7d6eaaReview102026-05-31
v0.0.0-20260529203833-1ad81fb005c2Review102026-05-30
v0.0.0-20260529164854-c4d330a51787Review102026-05-30

Block this in CI

PkgRadar gates github.com/semaphoreui/semaphore/pro (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/semaphoreui/semaphore/[email protected]