Go modules · proxy.golang.org
gopkg.in/kubermatic/kubermatic.v2
Remote Payload: matched "github.com/containernetworking/plugins/releases/download"
Why PkgRadar flagged v2.30.1-0.20260526174043-cbf02907873d
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "github.com/containernetworking/plugins/releases/download" · gopkg.in/kubermatic/[email protected]/cmd/kubermatic-installer/cmd_mirror_binaries.go |
| medium | Remote Payload | matched "cURL " · gopkg.in/kubermatic/[email protected]/pkg/controller/user-cluster-controller-manager/resources/resources/operating-system-manager/webhook.go |
| medium | Go Mod Replace Local | go.mod replace directive redirects to a local filesystem path — non-portable / dev-time only. · gopkg.in/kubermatic/[email protected]/go.mod |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v2.30.1-0.20260526174043-cbf02907873d | Review | 83 | 2026-05-30 |
v2.30.4 | Review | 83 | 2026-05-30 |
Block this in CI
pkgradar gate --ecosystem go gopkg.in/kubermatic/[email protected]