How Go mitigates supply chain attacks
&gt; Unlike most other package managers files, Go modules don’t have a separate list of constraints and a lock file pinning specific versions.<p>The weird thing about the Go devs is there is always that little bit of elitism under the surface that I detect in their writing (whether it be colors in the playground, the GC, etc). I spent years writing Go and have now moved to Rust. What I find odd is the Rust team has done (IMO) one of the greater achievements in PL history and yet they seem to not have this elitism thing going on (or maybe I just haven&#x27;t noticed). Go on the other hand, IMO, made some &quot;interesting&quot; language choices (like keeping null) and they seem to want to be celebrated for it and claim their achievements as new and novel.<p>EDIT: To clarify, I&#x27;m talking about the core Go devs - those that work on stdlib and the compiler