Also the lockfiles are not recursive. i.e. they don't apply to the dependencies ...

		hashhar on April 1, 2022 \| parent \| context \| favorite \| on: How Go mitigates supply chain attacks Also the lockfiles are not recursive. i.e. they don't apply to the dependencies you install or their transitive deps.