Go modules · proxy.golang.org
github.com/sheryarbutt/kubermatic/v2
Remote Payload: matched "github.com/containernetworking/plugins/releases/download"
Why PkgRadar flagged v2.0.0-20260611102732-2833fe3c4de0
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "github.com/containernetworking/plugins/releases/download" · github.com/sheryarbutt/kubermatic/[email protected]/cmd/kubermatic-installer/cmd_mirror_binaries.go |
| medium | Remote Payload | matched "cURL " · github.com/sheryarbutt/kubermatic/[email protected]/pkg/controller/user-cluster-controller-manager/resources/resources/operating-system-manager/webhook.go |
| medium | Go Mod Replace Local | go.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · github.com/sheryarbutt/kubermatic/[email protected]/go.mod |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v2.0.0-20260611102732-2833fe3c4de0 | Review | 83 | 2026-06-13 |
v2.0.0-20260609162731-7680620f30b2 | Review | 83 | 2026-06-12 |
v2.0.0-20260608073029-0cc27dab2d29 | Review | 83 | 2026-06-09 |
v2.0.0-20260605085735-2e634b0e6fe4 | Review | 83 | 2026-06-06 |
v2.0.0-20260602153834-893dd0ff7d89 | Review | 83 | 2026-06-04 |
v2.0.0-20260529142929-383b0b0dd72b | Review | 83 | 2026-06-01 |
v2.0.0-20260526174043-cbf02907873d | Review | 83 | 2026-05-30 |
Block this in CI
pkgradar gate --ecosystem go github.com/sheryarbutt/kubermatic/[email protected]