The download protocol
▷ Enabled by setting the GOPROXY
variable
▷ Dependencies are fetched via http
3
Slide 4
Slide 4 text
“
“How one developer just broke Node,
Babel and thousands of projects with
11 lines of javascript”
Source:
https://www.theregister.co.uk/2016/03/23/npm_left_pad_chaos/
4
A little story...
Slide 5
Slide 5 text
ENTER ATHENS
5
Slide 6
Slide 6 text
Athens
▷ Speed
▷ Immutability
▷ Reproducible builds
▷ Hit the vcs only once
▷ Blacklist repos
▷ Fetch from an upstream instance
6
Slide 7
Slide 7 text
Try it!
Experimental public instance:
https://microsoftgoproxy.azurewebsites.net
7
Slide 8
Slide 8 text
docs.gomods.io
github.com/gomods/athen
s
#athens on slack
8