3 ms·
Their rendering handling seems to be a lot better than gofiber's[1] which downloads nearly 1,000 packages and sadly that ruled it out as a viable framework when
by uo21tp5hoyg 4y ago
Their rendering handling seems to be a lot better than gofiber's[1] which downloads nearly 1,000 packages and sadly that ruled it out as a viable framework when I was looking for web frameworks to use.
[1] https://github.com/gofiber/template/blob/master/go.sum https://github.com/gofiber/template/blob/master/go.sum
- deleted 4y ago[deleted]
- m90 4y agoA package appearing in go.sum does not necessarily mean it's being used. It just means it has been downloaded once, but might have been replaced by some other version at some point.
- salmo 4y agoThis has bitten me before. A security scanner reported a vulnerability from this that was blocking me from my “use X at work” request. I ended up having to teach the vendor of the tool about go mod. But if you are publishing a “release” I personally think it is good to tidy that up. Even just to prevent misconceptions. No reason to preserve ancient versions and especially failed library experiments.
- omginternets 4y agoIs there a safe way to de-bloat go.sum?
- m90 4y agoTheres go mod tidy, which does exactly that.
- omginternets 4y agoDoes that clear out go.sum too? I thought it only affected go.mod ...