3 ms·
> Honestly as a polyglot, only a Go project can run without being touched for 5 years. Go CVE archive [1] clearly indicate otherwise. What distinguishes a Go p
by dig1 2y ago
> Honestly as a polyglot, only a Go project can run without being touched for 5 years.
Go CVE archive [1] clearly indicate otherwise. What distinguishes a Go project from any other programming language?
[1] https://pkg.go.dev/vuln/list https://pkg.go.dev/vuln/list
- im_dario 2y ago> What distinguishes a Go project from any other programming language? My experience with Go, as user and open source maintainer, is that many libraries just work even if untouched for several years. There is a culture around building small libraries, with minimal usage of dependencies beyond the standard library. This leads to most CVEs existing in the standard library, which combined with Go's commitment to backward compatibility, makes improving your security posture simple by just upgrading the toolchain.