Researcher says ecosystem’s auto-caching is a net positive but presents exploitable quirks A security researcher says a backdoor masquerading as a legitimate Go programming language package used by thousands of organizations was left undetected for years.…
TLDR: repo github.com/boltdb/bolt is legit, don’t use any similarly-named copies, supposedly.