Hacker News Reader

I don't know for Go case how it would work, but what I saw in case of Maven is it's company wide blocked and you have to get your packages through Sonatype Nexus - and Nexus either has it's own packages or it has a proxy for Maven packages. So I wonder in case of Go, if it would be unfeasible to block GitHub so they would just block the entire use of the language in company developed software.

View on HN

exactly. If you block go packages via firewall IT rules, you block github.com software engineering work. It's the one thing I think that's holding Golang back. Deno as well. I know it looks novel but it's a security nightmare.

Blocking the official Google Go proxy will work pretty well, go get will just fail by default.

If someone works around that on a developer machine, it shouldn't matter, because release builds should still come from an automated system, right?

Reply on news.ycombinator.com