[androiddrew]

Welcome to Golang packaging problems. Hope you get it sorted out

[sshine]

But Sylvain Kerkour says Go's approach is much better than Rust's!

[Ferret7446]

Not sure what your mean, Golang has solved this problem. Packages are not dependent on GitHub, and trust and namespacing is done by domain which works really well.

[bsder]

Can someone explain to me why the inverse domain name solution that everyone in the Java world converged on doesn't work?

It's really not clear to me why people keep avoiding that.

[estebank]

1) Trawl registry for packages owned by domains.

2) Note expired domains and register them yourself.

3) Supply chain compromise.

That, and not wanting people to fork out money for a domain as a requirement to participate in the ecosystem.

[bsder]

In my personal opinion, if a rogue actor can compromise your project by buying you the equivalent of a beer and a pizza, I don't think anyone should trust you as a dependency to any extent.

[what]

$10/year is too high a price when I spend that much on my morning Starbucks order…

[msm_]

Average monthly salary in Nigeria is $220.42. Median monthly income is $65.02. Minimum wage is $0.26/hour.

I know this kind of money sounds banal for us now, but even I, when I was a student (especially in high school), tried to avoid spending any money on my hobby (programming).

[steveklabnik]

The shape is very different. The only thing crates.io uses GitHub for is for identity.