gomodguard

gomodguard copied to clipboard

Indirect dependencies

1

Hi mate! I'm a software engineer from Ozon Russia (big russian marketplace). We realy love your linter inside golangci-lint as we are able to check dependencies of projects. Unfortunately we...

zcolleen

Blocking stdlib packages

2

Dear maintainer, Thanks so much for your excellent linter! We have been using it via `golangci-lint` and it works great :smile: gomodguard does not seem to be able to block...

jawnsy

``` gomodguard: Panic stack trace: goroutine 1 [running]:\nruntime/debug.Stack() & can't run linter goanalysis_metalinter: panic occurred ``` ## Description My go.mod file is not in the root directory of the project....

honey-yogurt

I haven't figured out an exact pattern, but it appears that blocked modules are not flagged in some instances: ```sh $ cat .gomodguard.yaml blocked: modules: - gotest.tools/v3/assert: recommendations: - github.com/stretchr/testify/assert...

oschwald

Bump golang.org/x/mod from 0.11.0 to 0.12.0

1

Bumps [golang.org/x/mod](https://github.com/golang/mod) from 0.11.0 to 0.12.0. Commits baa5c2d all: add godoc links 7603649 zip: fix TestCreateFromDirSpecial/ignore_symlink on wasmtime 22d21f4 zip: fix doc for CreateFromVCS function bfed713 zip: fix LICENSE file...

dependabot[bot]

Feature Request: Support blocking multiple ranges for a same dependency

1

Hi, Ryan, thank you for creating such a great plugin. I want to restrict a module to a certain version or a certain range, like `go.mongodb.org/mongo-driver`, I hope I only...

keaising

Tools import appears to be invalid

2

When trying to build or compile this library included in another project that happens to use the build tag `tools` this library fails with: ``` tools.go:5:8: import "github.com/t-yuki/gocover-cobertura" is a...

Skarlso

In some scenarios, a large number of dependencies with similar names will be used within the organization, and this tool can be used to reject these dependencies according to regular...

leaxoy

If someone imports a module in their code that was an indirect dependency and does not run `go mod tidy` it will not detect it as a blocked dependency.

ryancurrah