Go.sum is not a lockfile — stop parsing it to analyze dependency graphs
TL;DR Go.sum is a local cache of module checksums, not a lockfile, and it does not affect version selection. For…
Go authors: stop treating go.sum as a lockfile — use go.mod instead
TL;DR The author argues go.sum is not a lockfile and has no effect on version resolution; it is a local…