Go.sum is not a lockfile — stop parsing it to analyze dependency graphs
TL;DR Go.sum is a local cache of module checksums, not a lockfile, and it does not affect version selection. For…
Go authors: stop treating go.sum as a lockfile — use go.mod instead
TL;DR The author argues go.sum is not a lockfile and has no effect on version resolution; it is a local…
Cursed Bundler — Using Go’s module tooling to fetch Ruby gems
TL;DR A thought experiment and proof-of-concept shows you can use Go's module fetcher (go get) to download Ruby gems by…