|
|
|
|
|
|
by ignaloidas
1256 days ago
|
|
|
Considering how few people do so, I'm fairly certain it would take more than a month for somebody to catch that. But I guess it's also fairly easy to test it: just serve a slightly different version to the google's go mirror (by the user agent), and see how long until somebody complains to you about it. |
|
|
I think every company I know of with private Go modules (6-8 or so?) is running a module proxy, which will detect this. The several times we've detected this it's always been within 2-3 days of the upstream mistake. When I go to report a bug we're not always the first either.