Go modules · proxy.golang.org

github.com/transparency-dev/witness

Tls Verification Disabled

Why PkgRadar flagged v0.0.0-20260625172427-6eaf24b476e8

Severity	Signal	Evidence
medium	Tls Verification Disabled	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260625172427-6eaf24b476e8`	Review	12	2026-06-26
`v0.0.0-20260617164027-9332986a94a4`	Low risk	0	2026-06-18
`v0.0.0-20260617150439-4eaf2496766a`	Low risk	0	2026-06-18
`v0.0.0-20260617113558-d94ec97fe3c9`	Low risk	0	2026-06-18
`v0.0.0-20260616150713-f6b6fd39970a`	Low risk	0	2026-06-17
`v0.0.0-20260616110004-26841b7af8a8`	Low risk	0	2026-06-17
`v0.0.0-20260615135038-2e3c00855aea`	Low risk	0	2026-06-16
`v0.0.0-20260612094132-9ccbfe3a307c`	Low risk	0	2026-06-13
`v0.0.0-20260612092340-f4282de592fa`	Low risk	0	2026-06-13
`v0.0.0-20260612082214-b76bf76e3bd2`	Low risk	0	2026-06-13
`v0.0.0-20260611181250-8df5d0f0a337`	Low risk	0	2026-06-12
`v0.0.0-20260610130417-e288f04d96d5`	Low risk	0	2026-06-11

Block this in CI

PkgRadar gates github.com/transparency-dev/witness (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/transparency-dev/[email protected]