| commit | 860388717186a94044038508fceb5b378f699ca8 | [log] [tgz] |
|---|---|---|
| author | Russ Cox <rsc@golang.org> | Thu Feb 14 01:57:14 2019 -0500 |
| committer | Russ Cox <rsc@golang.org> | Sat Mar 16 02:01:45 2019 +0000 |
| tree | 7ee2ec8b85c44c3562ee1b2a64eac1cae72a9559 | |
| parent | 6983f9a4d3e92234885fba2b8e990bba0a7d7f3e [diff] |
notary/internal/notecheck: check go.sum against notary This is part of a design sketch for a Go module notary. Eventually the code will live outside golang.org/x/exp. Everything here is subject to change! Don't depend on it! This is a demo of using the notary URL endpoints to validate go.sum entries. The real implementation in cmd/go would cache both the tree head and downloaded tiles. Change-Id: I6715cbe40e07fbab0c5cb9ab20e366195b66e6da Reviewed-on: https://go-review.googlesource.com/c/exp/+/162899 Run-TryBot: Russ Cox <rsc@golang.org> Reviewed-by: Filippo Valsorda <filippo@golang.org>
This subrepository holds experimental and deprecated (in the old directory) packages.
The idea for this subrepository originated as the pkg/exp directory of the main repository, but its presence there made it unavailable to users of the binary downloads of the Go installation. The subrepository has therefore been created to make it possible to go get these packages.
Warning: Packages here are experimental and unreliable. Some may one day be promoted to the main repository or other subrepository, or they may be modified arbitrarily or even disappear altogether.
In short, code in this subrepository is not subject to the Go 1 compatibility promise. (No subrepo is, but the promise is even more likely to be violated by go.exp than the others.)
Caveat emptor.