Go module proxy
Fewer than 5 people recommend it so far, so there's no written verdict. Here is what commenters said.
3recommend
0warn against
Nov 28, 2025first mention
Sep 28, 2026latest mention
Why people recommend it
“Go module downloads default to a proxy (proxy.golang.org by default, can be configured and/or self-hosted)”
Caveats and dissent
No one in these comments warned against it.
Threads where it came up
- Don't couple your Go code to GitHub 2 mentions
- go.sum Is Not a Lockfile 2 mentions
- GitLab discovers widespread NPM supply chain attack 1 mention
Data: go-module-proxy.json. Quotes are verbatim; the verdict and theme labels are written by a model from these comments, and every clause links to its sources.
All comments 5
This should be the first thing to learn when starting with Golang. Let's take a project I worked on for a couple of years some time ago, it has this go.mod file: https://gitlab.com/nunet/device-management-service/-/blob/main/go.mod?ref_type=heads Is it just changing all instances of `github.com` to `proxy.golang.org`? Shouldn't `go build` warn about using third party proxies for dependencies? Should `go get` offer a
“https://proxy.golang.org/”
Here's another person auditing the checksum database: https://raphting.dev/posts/gosumdb-live-again/
“Checksums are stored forever, in a Merkle Tree”
“Go module downloads default to a proxy (proxy.golang.org by default, can be configured and/or self-hosted)”