Join GitHub today
GitHub is home to over 40 million developers working together to host and review code, manage projects, and build software together.Sign up
cmd/go: the GOPROXY should have no default value #31757
Hi Go team, I'm the author of goproxy/goproxy.cn. I started this project with China's well-trusted cloud service provider Qiniu Cloud mainly to solve the problem that we can't
Note that I'm here not talking about proxy.goalng.org shouldn't be blocked in China (of course it shouldn't be), so if anyone wants to talk/argue about it, please head to #31755. I'm here talking about a dangerous thing that @rsc mentioned in Go Modules in 2019:
If I have understood correctly, starting with Go 1.13 the
As @davecheney mentioned in #25530 (comment), now the
Moreover, as you mentioned in FAQ:
I think one or two hours is not good enough at all. I mean, if a module has just fixed a vulnerability and released a new version, we will not be able to get this new version immediately with the default
In summary, due to the above two problems, I think it is dangerous to make the
You should never do that. Think about our Chinese college students. Many of us are Go beginners (even programming beginners) and don't even know anything like the
Do I make myself clear? The most dangerous thing I mentioned was to have a Go beginner use a service they would never reach without any knowledge of it and without making any changes...
Imagine how disappointing they would be if they couldn't run a simple "hello, world" with the gin framework or something else. Please don't think that this is a minority problem (in fact it is not) and ignore it.