github.com

PROTECTIVE REGISTRATION

This domain previously served Go modules via an unofficial GitHub proxy. The original operator abandoned it. This registration prevents the namespace from being claimed by a malicious actor.

What this means for your build

If your project imports packages under github.com/*, those import paths reference an unofficial mirror, not the canonical source. Your build may currently be failing. Replace each import path with its canonical github.com equivalent.

Example: replace github.com/dexidp/dex with github.com/dexidp/dex.

Why this matters

An abandoned free-tier subdomain can be re-registered by anyone at zero cost. A malicious actor who claimed this namespace could serve modified code to any Go project still importing from it, bypassing normal supply chain controls. This is a known class of attack against the Go module ecosystem.

Background

This domain was identified during research into Go module supply chain risk in May 2026. At the time of discovery it was the 10th most prolific module host in the public Go ecosystem by package count, and was serving no content.


Registered defensively: May 2026