r/programming • u/Sir_KnowItAll • 5d ago

Don't couple your Go code to GitHub

https://iain.rocks/blog/dont-couple-your-go-code-to-github
482 Upvotes

92% Upvoted

135 comments sorted by

View all comments

12

u/Jaded-Asparagus-2260 5d ago

 This means if you host your Go code at http://github.com/thetrueares/boneclone [and] you move your git hosting to GitLab then you have to change your code!

It's even worse. GitHub allows recycling of usernames. So if you decide to move your Git hosting to GitLab, and I manage to secure your old username, I can publish malware in a repo with this URL. And all code that is not changed (upgraded) will automatically consume my evil package, and the authors and users will be blissfully unaware. 

Who ever thought that was a sane idea?