| commit | cf631fceb1a5cdfa1e4c7b6e352dff05d648121e | [log] [tgz] |
|---|---|---|
| author | Zvonimir Pavlinovic <zpavlinovic@google.com> | Fri Aug 13 12:23:17 2021 -0700 |
| committer | Zvonimir Pavlinovic <zpavlinovic@google.com> | Tue Aug 17 20:54:19 2021 +0000 |
| tree | 74a19bb3338bc0dfe2a043162f7aa626940fe52e | |
| parent | 0bb80722635d7a79e06599513afda196b46ba536 [diff] |
vulndb/govulncheck: make extractModules output unique For large projects, such as k8s, the number of modules different in memory but with the same import path can be large. This can result in many db queries for the same import path, which can be a problem if the db is remote and no caching is turned on. This CL optimizes the loading by making sure module extraction returns the same module up to import paths. This CL also updates the dependencies on vulndb. Change-Id: I63f09382e318fa33f7e9280c8cc1ddb5694983b7 Reviewed-on: https://go-review.googlesource.com/c/exp/+/342110 Trust: Zvonimir Pavlinovic <zpavlinovic@google.com> Run-TryBot: Zvonimir Pavlinovic <zpavlinovic@google.com> TryBot-Result: Go Bot <gobot@golang.org> Reviewed-by: Roland Shoemaker <roland@golang.org>
This subrepository holds experimental and deprecated (in the old directory) packages.
The idea for this subrepository originated as the pkg/exp directory of the main repository, but its presence there made it unavailable to users of the binary downloads of the Go installation. The subrepository has therefore been created to make it possible to go get these packages.
Warning: Packages here are experimental and unreliable. Some may one day be promoted to the main repository or other subrepository, or they may be modified arbitrarily or even disappear altogether.
In short, code in this subrepository is not subject to the Go 1 compatibility promise. (No subrepo is, but the promise is even more likely to be violated by go.exp than the others.)
Caveat emptor.