Go modules · proxy.golang.org
gitlab.com/data-custodian/custodian/tools/quitsh
Go Mod Replace Local: go.mod replace directive redirects to a local filesystem path — non-portable / dev-time only.
Why PkgRadar flagged v0.0.0-20260610072030-447daae0132f
| Severity | Signal | Evidence |
|---|---|---|
| medium | Go Mod Replace Local | go.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · gitlab.com/data-custodian/custodian/tools/[email protected]/go.mod |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v0.0.0-20260610072030-447daae0132f | Review | 10 | 2026-06-11 |
v0.0.0-20260609121845-91abac500463 | Review | 10 | 2026-06-10 |
v0.0.0-20260609115949-50d3802d2011 | Review | 10 | 2026-06-10 |
v0.0.0-20260609050105-6f3243289187 | Review | 10 | 2026-06-10 |
v0.0.0-20260605152505-adedfb96b527 | Review | 10 | 2026-06-08 |
v0.0.0-20260604163324-c28eba26253b | Review | 10 | 2026-06-05 |
v0.0.0-20260603144008-59757108a682 | Review | 10 | 2026-06-04 |
v0.0.0-20260603111040-b5bfd4f35d9e | Review | 10 | 2026-06-04 |
v0.0.0-20260603094304-ab9185c8a779 | Review | 10 | 2026-06-04 |
v0.0.0-20260602175018-ce58f6b8f46b | Review | 10 | 2026-06-03 |
v0.0.0-20260602173215-df6d1ec49fa3 | Review | 10 | 2026-06-03 |
v0.0.0-20260602165900-f950cf61d88f | Review | 10 | 2026-06-03 |
v0.0.0-20260601074617-9b9270a22eee | Review | 10 | 2026-06-02 |
Block this in CI
pkgradar gate --ecosystem go gitlab.com/data-custodian/custodian/tools/[email protected]