Go modules · proxy.golang.org

github.com/vektah/gqlgen/_examples

Go Mod Replace Local: go.mod replace directive redirects to a local filesystem path — non-portable / dev-time only.

Why PkgRadar flagged v0.0.0-20260615180931-47ac83ca2c81

Severity	Signal	Evidence
medium	Go Mod Replace Local	go.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · github.com/vektah/gqlgen/[email protected]/go.mod

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v0.0.0-20260615180931-47ac83ca2c81`	Review	10	2026-06-17
`v0.0.0-20260611141749-a8c3585d0d06`	Review	10	2026-06-13
`v0.0.0-20260610202510-7ab1571ae6a1`	Review	10	2026-06-11
`v0.0.0-20260604233759-c1fa6352afac`	Review	10	2026-06-06
`v0.0.0-20260602105742-8888c7c06b31`	Review	10	2026-06-04
`v0.0.0-20260531010912-8a12bb6d84ab`	Review	10	2026-06-01
`v0.0.0-20260526132148-258c0dd360b3`	Review	10	2026-05-30

Block this in CI

PkgRadar gates github.com/vektah/gqlgen/_examples (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/vektah/gqlgen/[email protected]