|author||Roland Shoemaker <email@example.com>||Fri Jul 16 11:54:27 2021 -0700|
|committer||Roland Shoemaker <firstname.lastname@example.org>||Thu Jul 29 17:27:20 2021 +0000|
vulndb/govulncheck: surface unreachable vulns Surface vulnerabilities in imported packages which are not reachable in the call graph. Additionally we pre-filter vulnerabilities which do not apply to the versions used, skipping unnecessary analysis. Change-Id: If845a376406cd079a5f96935f419e6af5eabd76c Reviewed-on: https://go-review.googlesource.com/c/exp/+/335171 Trust: Roland Shoemaker <email@example.com> Trust: Zvonimir Pavlinovic <firstname.lastname@example.org> Run-TryBot: Roland Shoemaker <email@example.com> TryBot-Result: Go Bot <firstname.lastname@example.org> Reviewed-by: Zvonimir Pavlinovic <email@example.com>
This subrepository holds experimental and deprecated (in the
old directory) packages.
The idea for this subrepository originated as the
pkg/exp directory of the main repository, but its presence there made it unavailable to users of the binary downloads of the Go installation. The subrepository has therefore been created to make it possible to
go get these packages.
Warning: Packages here are experimental and unreliable. Some may one day be promoted to the main repository or other subrepository, or they may be modified arbitrarily or even disappear altogether.
In short, code in this subrepository is not subject to the Go 1 compatibility promise. (No subrepo is, but the promise is even more likely to be violated by go.exp than the others.)