Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[EXTERNAL] forum and real-time-forum: Allow both gofrs/uuid and google/uuid #2872

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

sadiqui
Copy link
Contributor

@sadiqui sadiqui commented Feb 11, 2025

This PR updates allowed packages in forum and real-time-forum projects to permit google/uuid for UUID generation along with gofrs/uuid. The projects are web-based forums with a generel-purpose use case, where UUIDs are primarily used for session tokens. Since the projects are written in Go (which was designed at Google), it's reasonable to allow both UUID implementations to give learners flexibility while ensuring compatibility with best practices in the Go ecosystem. This change does not introduce new dependencies but broadens the allowed options for UUID handling within the projects.

Information & Rationale:

  • google/uuid is developed by Google, making it a natural fit for Go-based projects. It is efficient, lightweight, and optimized for performance, aligning with Go’s design philosophy.
  • gofrs/uuid is designed as a secure replacement for satori/go.uuid, addressing past vulnerabilities. It prioritizes correctness and safe randomness handling.
Feature gofrs/uuid google/uuid
Security Focus ✅ Strong ⚠️ Less Emphasis
Performance ⚠️ Slightly Slower ✅ More Efficient
Active Maintenance ✅ Yes ✅ Yes
Compliance ✅ RFC 4122 ✅ RFC 4122
Recommended Use Case Security-sensitive apps General-purpose UUIDs

@sadiqui sadiqui changed the title Allow both gofrs/uuid and google/uuid [EXTERNAL] forum and real-time-forum: Allow both gofrs/uuid and google/uuid Feb 11, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant