I like how the Go team does things. For example, this is only one part of it, but the Go checksum database seems like a pretty good solution for making sure tha

I like how the Go team does things. For example, this is only one part of it, but the Go checksum database seems like a pretty good solution for making sure that a path and version reliably maps to the same source code. https://go.dev/ref/mod#checksum-database https://go.dev/ref/mod#checksum-database