PkgRadar

Go modules · proxy.golang.org

gitlab.com/mergetb/portal/services

Go Mod Replace Local: go.mod replace directive redirects to a local filesystem path — non-portable / dev-time only.

Why PkgRadar flagged v0.5.18-0.20210211224418-f84852443ff2

SeveritySignalEvidence
mediumGo Mod Replace Localgo.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · gitlab.com/mergetb/portal/[email protected]/go.mod

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.5.18-0.20210223225453-34a596e6f1dbLow risk02026-06-10
v0.5.18-0.20210214205834-af00a54251c0Low risk02026-06-08
v0.5.18-0.20210211224418-f84852443ff2Review102026-06-07
v1.7.17Review172026-06-05
v0.5.18-0.20210831195618-460481777eeaLow risk02026-06-03
v0.5.18-0.20210726164852-3dd2207916f6Review102026-06-01
v0.5.18-0.20210203171454-7f1a0005a519Low risk02026-05-31
v1.7.16Review172026-05-29
v1.7.15Review172026-05-29

Block this in CI

PkgRadar gates gitlab.com/mergetb/portal/services (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go gitlab.com/mergetb/portal/[email protected]