On Thu, May 15, 2025 at 12:51 AM W. Michael Petullo via golang <
golang@lists.fedoraproject.org> wrote:
> > FYI, members of Go-SIG plan to propose vendoring dependencies as the
> > default method to package Golang packages.
> >
> > This is the draft of the document:
> > https://fedoraproject.org/w
On Thu, Mar 20, 2025 at 4:22 PM Zdenek Dohnal via golang <
golang@lists.fedoraproject.org> wrote:
> Hi all,
>
> I maintain two components written in Go, so time to time the components
> get CVE reports where vulnerable code comes from another component via
> static linking during build.
>
> I was
