#go

North Korean hackers have compromised legitimate-looking Go and PHP open-source packages, known as the "PolinRider" campaign, to distribute malware. The attackers maintain persistent access by updating packages with malicious code even after initial security reviews. This supply-chain attack highlights the growing threat of malware hidden in trusted software repositories.

After a year of using Gomobile to develop a mobile app in Go, the author reflects on the experience, covering the development process, challenges faced with the Gomobile toolchain, and the overall viability of using Go for cross-platform mobile development.

Gsx is a Go library that brings a JSX-like template syntax to the language, allowing developers to build type-safe, composable HTML templates directly in Go code without external template files.

The Go Report Card project, which grades Go language projects based on code quality checks, was archived on July 1, 2026, by its owner. The repository is now read-only and no longer maintained.

Qdf is a Go-based serializer that stores data as raw queryable bytes. It produces output smaller than Protocol Buffers, offering a compact binary format where field values can be accessed directly from the encoded byte stream without full deserialization.

GONK is a lightweight, edge-native API gateway written in Go. It is designed for edge computing environments, offering low latency and efficient API management at the network edge.

A Go developer created a new zero-syscall IPC mechanism called hft-ipc, achieving 18 million transactions per second to address slow database insert performance. The implementation uses a wait-free, lockless ring buffer design with zero allocation and no system calls during operation, inspired by LMAX Disruptor and DPDK.

The article discusses the philosophy behind the Gin web framework for Go, emphasizing a preference for simplicity and minimalism over an overly "easy" or feature-heavy design. It argues that keeping the framework simple and composable gives developers more control and clarity, even if it requires slightly more explicit code, rather than hiding complexity behind magic.

Go 1.26 introduces under-the-hood improvements addressing long-standing developer annoyances, including better memory management, faster compilation, and more ergonomic error handling. The release focuses on practical quality-of-life fixes rather than flashy new features.

SilentJSON is a zero-allocation JSON parser for Go that achieves throughput of up to 3.4 GB/s by avoiding memory allocations during parsing. It is designed for high-performance applications where minimizing garbage collection overhead is critical.

A French developer released Curvytron 2, a free browser party game sequel to the 10-year-old original. It features 3D visuals (Three.js), 100fps Go server simulation, binary WebSocket netcode, and instant reconnection — no ads or tracking.

This guide explores how eBPF technology enables deep observability in AI-generated services, providing practical implementation examples using Go and C. It explains how eBPF allows developers to monitor system behavior, trace function calls, and collect performance data with minimal overhead. The article positions eBPF as a key tool for observability in modern, AI-driven applications.

Markit is a fast, native Markdown editor built with Go and Wails, designed for speed and native performance across platforms.

go-iroh is a Go library that provides iroh-compatible networking, enabling peer-to-peer connections and data transfer in Go applications.

A developer benchmarks six Go cache designs, showing that sharded locks with proper tuning outperform single mutex caches under high contention, while cautioning about the impact of shard count and hash distribution on performance.

Plakar released v1.1.0 of its Go content-defined chunking library, achieving up to 3.7 GB/s throughput while using a third less memory. The release also includes formal proofs of correctness for the chunking algorithms.

Asciigraph is a Go package that creates lightweight ASCII line graphs for the command line, requiring no external dependencies.

Delve v1.27.0 has been released. The update includes new features, bug fixes, and improvements to the Go debugger.

Flick is an open-source, self-hostable file sharing platform built with Go and Next.js. It focuses on sharing files via human-friendly codes, offering an alternative to services like WeTransfer with full user control over data and infrastructure.

Proton is a pure Go GUI library with no CGO dependencies, designed for building native-looking applications. It aims to simplify cross-platform development by avoiding the complexities of C bindings.

Miglite is a lightweight Go library for managing raw SQL database migrations, supporting multiple databases like MySQL and SQLite. It uses a local binary for schema versioning with a simple command-line interface for applying and rolling back changes.

Jeeves is a minimal terminal user interface (TUI) for systemd, written in Go and designed for lightweight hardware. It provides a simple way to manage systemd services and units from the command line with a compact interface.

The author, drawing on years of Go development experience, has authored an interview guide focused on senior Go engineering and AI platform engineering roles. The book aims to fill a gap by providing the targeted preparation resource the author felt was missing during their own job search.

Jargo is a Golang port of Pipecat, a WebRTC-native, audio-first conversational-AI framework for Go, replicating Pipecat's architecture and design decisions for developers who prefer Golang.

MDLight is a lightweight 14MB Markdown reader built with Wails, Go, and Svelte. It offers a simple reading experience without vaults or plugins, focusing on minimalism and speed.

The developer introduces AssertGo, a fluent assertion library for Go inspired by AssertJ, leveraging Go 1.27's generic methods to replace any-based top-level methods. The library provides chainable assertions for strings, integers, slices, maps, and types, with all design choices made by the author and code generated with Claude Sonnet in incremental commits.

Veritect is a stateless, zero-trust schema drift detection tool written in Go. It helps developers identify and monitor changes in database schemas without maintaining state, aiming to improve security and consistency in schema management.

The article presents a tool that generates interactive hierarchical call graphs for Go codebases. It allows developers to explore code visually at different levels of granularity (struct, package) and uses AI to filter out uninteresting control flow while enriching diagrams with semantic information. Diagrams for popular Go repositories are available for feedback.

A user switched from Wiki.js to an open-source Go wiki project and began sponsoring its development, citing better performance, simpler setup, and lower resource usage as key reasons for the migration.

A Go library called rsvp provides a drop-in replacement for http.ListenAndServe that adds graceful HTTP server shutdown. Users can customize trigger signals, shutdown timeout, context, TLS, and logging via configuration options.