← Back to context

Comment by mdaniel

1 day ago

Or the import path was someone's blog domain that included a <meta> reference to the actual github repo (along with the tag, IIRC) where the source code really lives. Insanity

2 comments

mdaniel

Reply
pjmlp  1 day ago

I never understood the mentality to have SCM urls as package imports directly on the source code.

  • mdaniel  1 day ago

    Well, that's the problem I was highlighting - golang somehow decided to have the worst of both worlds: arbitrary domains in import paths and then putting the actual ref of the source code ... elsewhere

      import "gopkg.in/yaml.v3" // does *what* now?

  curl https://gopkg.in/yaml.v3?go-get=1 | grep github
  <meta name="go-source" content="gopkg.in/yaml.v3 _ https://github.com/go-yaml/yaml/tree/v3.0.1{/dir} https://github.com/go-yaml/yaml/blob/v3.0.1{/dir}/{file}#L{line}">

    oh, ok :-/

    I would presume only a go.mod entry would specify whether it really is v3.0.0 or v3.0.1

    Also, for future generations, don't use that package https://github.com/go-yaml/yaml#this-project-is-unmaintained