In-reply-to » @prologic From Russ Cox: "note that if you set GOPROXY=direct, the go command still uses the checksum database to protect against supply chain attacks. If you really want the go command not to use servers, you also need to set GOSUMDB=off."

@ocdtrekkie@twtxt.net Yeah but so what? That’s the same as GitHub tracking all the shit you clone πŸ˜†

​ Read More