PkgRadar

Go modules · proxy.golang.org

github.com/vllm-project/semantic-router/perf

Remote Payload: matched "curl "

Why PkgRadar flagged v0.0.0-20260609073231-3b75834f69fb

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · github.com/vllm-project/semantic-router/[email protected]/go.sum
mediumGo Mod Replace Localgo.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · github.com/vllm-project/semantic-router/[email protected]/go.mod

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260609073231-3b75834f69fbReview222026-06-10
v0.0.0-20260608151500-9c5e18369e0eReview222026-06-09
v0.0.0-20260607123205-a9e28e1b4937Review222026-06-08
v0.0.0-20260606123411-4bc1a256c3a9Review222026-06-07
v0.0.0-20260605122127-850bdc5d510cReview222026-06-06
v0.0.0-20260605120057-9afc5a421886Review222026-06-06
v0.0.0-20260605113004-cd9383da764dReview222026-06-06
v0.0.0-20260605105637-7c8c9e2e1231Review222026-06-06
v0.0.0-20260605101830-86b385e4e57bReview222026-06-06
v0.0.0-20260605090153-8ef891691d06Review222026-06-06
v0.0.0-20260602133222-a0694610a595Review222026-06-03
v0.0.0-20260601175145-1aad8b6b4c83Review222026-06-02
v0.0.0-20260529141614-d90650c7a0c3Review222026-05-30

Block this in CI

PkgRadar gates github.com/vllm-project/semantic-router/perf (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/vllm-project/semantic-router/[email protected]
Start free — 25 scans / moView full evidence