PkgRadar

Go modules · proxy.golang.org

gitlab.com/gitlab-org/auth/iam

Go Mod Replace Local: go.mod replace directive redirects to a local filesystem path — non-portable / dev-time only.

Why PkgRadar flagged v1.16.1-0.20260619060619-a570bdc6365d

SeveritySignalEvidence
mediumGo Mod Replace Localgo.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · gitlab.com/gitlab-org/auth/[email protected]/go.mod

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.16.1-0.20260619060619-a570bdc6365dReview102026-06-20
v0.0.0-20260619060619-a570bdc6365dReview102026-06-20
v0.0.0-20260618130604-7dca950763d6Review102026-06-19
v1.16.0Review102026-06-19
v0.0.0-20260618114138-db36f7ef9806Review102026-06-19
v1.15.0Low risk02026-06-19
v1.14.1-0.20260618102847-36e8f6b434acLow risk02026-06-19
v0.0.0-20260618102847-36e8f6b434acLow risk02026-06-19
v0.0.0-20260618100858-4457d5f5a8d1Low risk02026-06-19
v0.0.0-20260618093856-9b07c44787d2Low risk02026-06-19
v1.13.2-0.20260618051407-8b9b8b45376fLow risk02026-06-19
v0.0.0-20260617151503-0dc4a852591cLow risk02026-06-18
v1.10.3-0.20260616155634-aa5ee6cd1f52Low risk02026-06-17
v1.10.0Low risk02026-06-17
v1.0.0Low risk02026-06-17
v1.1.0Low risk02026-06-17

Block this in CI

PkgRadar gates gitlab.com/gitlab-org/auth/iam (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go gitlab.com/gitlab-org/auth/[email protected]
Start free — 25 scans / moView full evidence