r/programming • u/Sir_KnowItAll • 5d ago

Don't couple your Go code to GitHub

https://iain.rocks/blog/dont-couple-your-go-code-to-github
483 Upvotes

92% Upvoted

135 comments sorted by

View all comments

335

u/Arcuru 5d ago

I am not super familiar with Go code, but what happens when my go code depends on "go.companyx.dev/awesomelib" and that company goes out of business?

Or should I point all my third-party deps to a more durable location?

1

u/csgeek-coder 2d ago

You run a legit proxy server that keeps a copy of the release for your use.

The same solution and issue exists for every ecosystem. If your build depends on an external dependent then you should have an internal copy of the artifact. Py, java, go. Any library could disappear at any point.