PkgRadar

Go modules · proxy.golang.org

github.com/webdevelop-pro/i-models

Go Mod Replace Local: go.mod replace directive redirects to a local filesystem path — non-portable / dev-time only.

Why PkgRadar flagged v0.0.0-20260607131933-a7e5a4f1b22c

SeveritySignalEvidence
mediumGo Mod Replace Localgo.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · github.com/webdevelop-pro/[email protected]/go.mod

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.0-20260615144059-b6c8dcf149c6Low risk02026-06-16
v0.0.0-20260610142402-a9261a06a7b8Low risk02026-06-11
v0.0.0-20260610123732-afcfe751a336Low risk02026-06-11
v0.0.0-20260608103439-9a34f0a373f6Low risk02026-06-09
v0.0.0-20260607131933-a7e5a4f1b22cReview102026-06-08
v0.0.0-20260602234244-68c244c0fe19Review102026-06-03

Block this in CI

PkgRadar gates github.com/webdevelop-pro/i-models (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/webdevelop-pro/[email protected]