Comment by androiddrew 3 hours ago Welcome to Golang packaging problems. Hope you get it sorted out 4 comments androiddrew Reply sshine 3 hours ago But Sylvain Kerkour says Go's approach is much better than Rust's! steveklabnik 2 hours ago The shape is very different. The only thing crates.io uses GitHub for is for identity. bsder 2 hours ago Can someone explain to me why the inverse domain name solution that everyone in the Java world converged on doesn't work?It's really not clear to me why people keep avoiding that. estebank 1 hour ago 1) Trawl registry for packages owned by domains.2) Note expired domains and register them yourself.3) Supply chain compromise.That, and not wanting people to fork out money for a domain as a requirement to participate in the ecosystem.
steveklabnik 2 hours ago The shape is very different. The only thing crates.io uses GitHub for is for identity.
bsder 2 hours ago Can someone explain to me why the inverse domain name solution that everyone in the Java world converged on doesn't work?It's really not clear to me why people keep avoiding that. estebank 1 hour ago 1) Trawl registry for packages owned by domains.2) Note expired domains and register them yourself.3) Supply chain compromise.That, and not wanting people to fork out money for a domain as a requirement to participate in the ecosystem.
estebank 1 hour ago 1) Trawl registry for packages owned by domains.2) Note expired domains and register them yourself.3) Supply chain compromise.That, and not wanting people to fork out money for a domain as a requirement to participate in the ecosystem.
But Sylvain Kerkour says Go's approach is much better than Rust's!
The shape is very different. The only thing crates.io uses GitHub for is for identity.
Can someone explain to me why the inverse domain name solution that everyone in the Java world converged on doesn't work?
It's really not clear to me why people keep avoiding that.
1) Trawl registry for packages owned by domains.
2) Note expired domains and register them yourself.
3) Supply chain compromise.
That, and not wanting people to fork out money for a domain as a requirement to participate in the ecosystem.