sdboyer

gps

Go2016–2017

sdboyer / gps · Archived

gps

your dependencies have arrived

Explore on GitHub Read Hacker News discussions

4Distinct people

4Mentions

0Explicit recommenders

268GitHub stars

REPOSITORY AT A GLANCE

What to know before exploring

What it is

your dependencies have arrived

GitHub

Where it is used

No documented product use has been verified yet.

What people are saying

No recommendation phrase was found in the indexed comments.

No classified warning is attached to this page. Read the discussions before treating silence as approval.

Also in these discussions

masterminds/glide · linked in 2 of the same discussions

Mentioned in the same Hacker News threads. That is not proof they are substitutes.

This week on Hacker News

Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 3:56:07 PM UTC.

No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.

Mentions over time

HN mentions by month4 dated mentions

Observed mentions: 2016-07-29 12:40:44 UTC to 2017-09-28 14:25:15 UTC.

Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.

View mention counts and date ranges

UTC ranges include their start and exclude their end. Select a period to filter the source evidence.
Period	Start (UTC)	End (exclusive, UTC)	Mentions	Comments
Jul 2016	2016-07-01 00:00:00 UTC	2016-08-01 00:00:00 UTC	2	2
Aug 2016	2016-08-01 00:00:00 UTC	2016-09-01 00:00:00 UTC	0	0
Sep 2016	2016-09-01 00:00:00 UTC	2016-10-01 00:00:00 UTC	0	0
Oct 2016	2016-10-01 00:00:00 UTC	2016-11-01 00:00:00 UTC	0	0
Nov 2016	2016-11-01 00:00:00 UTC	2016-12-01 00:00:00 UTC	0	0
Dec 2016	2016-12-01 00:00:00 UTC	2017-01-01 00:00:00 UTC	0	0
Jan 2017	2017-01-01 00:00:00 UTC	2017-02-01 00:00:00 UTC	1	1
Feb 2017	2017-02-01 00:00:00 UTC	2017-03-01 00:00:00 UTC	0	0
Mar 2017	2017-03-01 00:00:00 UTC	2017-04-01 00:00:00 UTC	0	0
Apr 2017	2017-04-01 00:00:00 UTC	2017-05-01 00:00:00 UTC	0	0
May 2017	2017-05-01 00:00:00 UTC	2017-06-01 00:00:00 UTC	0	0
Jun 2017	2017-06-01 00:00:00 UTC	2017-07-01 00:00:00 UTC	0	0
Jul 2017	2017-07-01 00:00:00 UTC	2017-08-01 00:00:00 UTC	0	0
Aug 2017	2017-08-01 00:00:00 UTC	2017-09-01 00:00:00 UTC	0	0
Sep 2017	2017-09-01 00:00:00 UTC	2017-10-01 00:00:00 UTC	1	1

What Hacker News says

4 sources

jzelinskie·Sep 28, 2017

There's also gps[0], which has been what the community has been working to integrate with dependency management tools since 2016[1] and is what's currently used in dep[2]. I'm not sure how generically applicable it is, though. [0]: https://github.com/sdboyer/gps [1]: https://github.com/Masterminds/glide/tree/gps-integration [2]: https://github.com/golang/dep

In Gophersat: A SAT solver written in Go

vhost-·Jan 25, 2017

Finally hopeful for better dependency management! I was digging through the source code and see it works with mercurial, git and bazaar using a hash or tag (so you can lock a package down to either): https://github.com/sdboyer/gps/blob/master/vcs_source.go#L22... I'm guessing gps will be merged into the stdlib at some point.

In Go dependency management tool is made public

niftich·Jul 29, 2016

After more searching, I found a StackOverflow question asking the same thing [1], and the answer appears to be: "Vendoring is the act of making your own copy of the 3rd party packages your project is using. Those copies are traditionally placed inside each project and then saved in the project repository." Being familiar with both Maven and npm, in those communities, this act of checking dependencies into source control is a controversial and hotly-debated topic, but in those package managers is more often than not (please bear with my point) considered an anti-pattern, because both of them provide solutions [2][3][4], like a project's declarative list of dependencies along with a baseline (but often, overridable) conflicting-version-resolution algorithm. Of course, the more I understand the issue, the more questions I have. Why does Go h

Read the rest

ave multiple, competing package managers? Some, like Glide [5] (without judgements about all the others), encourage the type of declarative version management I quoted. Why does Go even ship with built-in package fetcher 'go get'? Why would anyone ever build a package fetcher for a publicly-released ecosystem that has no concept of versions or commit-IDs or content-adressed-hashes, or some other mechanism of tracking state to something that's as inherently mutable as a software package? I have no desire to point fingers, and I don't want to encourage bikeshedding, and I don't want to turn this sub-thread into an in-band debate, as I'm certain it's been done (over and over again) in the past, I just simply feel that 'go get' is fundamentally broken in its understanding of how people in the wild actually write software. I'm suddenly beginning to understand why there are concerted efforts [6][7][8] to address this issue in a community-led, officially-sanctioned way. [1] http://stackoverflow.com/questions/35109393/ [2] http://maven.apache.org/guides/introduction/introduction-to-... [3] https://github.com/ning/maven-dependency-versions-check-plug... [4] http://bytearcher.com/articles/semver-explained-why-theres-a... [5] https://github.com/Masterminds/glide [6] https://docs.google.com/document/d/18tNd8r5DV0yluCR7tPvkMTsW... [7] https://docs.google.com/document/d/1M4Ldgtxr9vC8wpyTldQe5oUy... [8] https://github.com/sdboyer/gps/wiki/Rationale

In Go Packaging Proposal Process

zalmoxes·Jul 29, 2016

Sam Boyer, one of the other people in the document wrote a nice article that dives into the complexity of dependency management. https://medium.com/@sdboyer/so-you-want-to-write-a-package-m... Discussion https://news.ycombinator.com/item?id=11088125 Sam is currently working on a library for Go https://github.com/sdboyer/gps

In Go Packaging Proposal Process