[go-nuts] Re: Intentionally omitting requires in go.mod - alternative to multi-module repository?

On Monday, January 31, 2022 at 1:22:09 AM UTC-5 leig...@gmail.com wrote: > I'm a user of the sentry-go SDK who has been impacted by the large number > of dependencies in the past. > > >Independently, if your users have automated tools that are issuing > false-positive CVE warnings based on the m

[go-nuts] Re: Intentionally omitting requires in go.mod - alternative to multi-module repository?

I'm a user of the sentry-go SDK who has been impacted by the large number of dependencies in the past. >Independently, if your users have automated tools that are issuing false-positive CVE warnings based on the module graph instead of the package-import graph, you may want to suggest that they

[go-nuts] Re: Intentionally omitting requires in go.mod - alternative to multi-module repository?

On Thursday, January 13, 2022 at 12:45:13 PM UTC-5 rhcar...@gmail.com wrote: > Hello fellow Gophers! > > I help maintain an SDK module > that includes > packages that provide middleware to different web frameworks (e.g. echo >