bleve 安全漏洞

bleve is a modern text indexing library for Go. A security vulnerability exists in bleve versions after v0.1.0, which stems from the fact that the bleve/http package, which is primarily used for demonstration purposes, lacks exhaustive validation of user input as well as any authentication and...

Analyzing Go Vendoring with BigQuery

GitHub published a snapshot of all the public open-source repositories to BigQuery and Francesc used it to draw some cool statistics about Go projects. I used the same dataset to analyze how the Go ecosystem does vendoring. Disclosure: there's some ego stroking here, as I'm the author of gvt. Try...