https://github.com/tailscale/depaware

depaware makes you aware of your Go dependencies
https://github.com/tailscale/depaware

Last synced: 5 days ago
JSON representation

depaware makes you aware of your Go dependencies

• Host: GitHub
• URL: https://github.com/tailscale/depaware
• Owner: tailscale
• License: bsd-3-clause
• Created: 2020-09-09T18:07:03.000Z (about 4 years ago)
• Default Branch: main
• Last Pushed: 2024-08-04T10:35:31.000Z (3 months ago)
• Last Synced: 2024-10-28T10:01:49.765Z (17 days ago)
• Language: Go
• Size: 36.1 KB
• Stars: 436
• Watchers: 9
• Forks: 11
• Open Issues: 6
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# depaware

depaware makes you aware of your Go dependencies.

It generates a list of your dependencies which you check in to your repo:

https://github.com/tailscale/tailscale/blob/main/cmd/tailscaled/depaware.txt

Then you and others can easily see what your dependencies are, how

they vary by operating system (the letters L(inux), D(arwin),

W(indows) in the left column), and whether they use unsafe/cgo (bomb

icon).

Then you hook it up to your CI so it's a build breakage if they're not up to date:

https://github.com/tailscale/tailscale/blob/93324cc7b3/.github/workflows/depaware.yml

Then during code review you'll see in your review whether/how your

dependencies changed, and you can decide whether that's appropriate.

You'll probably want to pin a specific vesion of the depaware tool in your go.mod file

that survives a "go mod tidy". You can add a file like this to your project:

https://github.com/tailscale/tailscale/commit/7795fcf4649ce4ddc2a5b345cb56516fa161b4b3