--- title: proxy.golang.org allows many Go packages to be silently... description: proxy.golang.org, the default Go module proxy, caches module versions indefinitely. This means broken or removed upstream dependencies are hidden from... canonical: https://daily.dev/posts/proxy-golang-org-allows-many-go-packages-to-be-silently-broken-cidwwm1y9 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: proxy.golang.org allows many Go packages to be silently broken | daily.dev og:description: proxy.golang.org, the default Go module proxy, caches module versions indefinitely. This means broken or removed upstream dependencies are hidden from... og:url: https://daily.dev/posts/proxy-golang-org-allows-many-go-packages-to-be-silently-broken-cidwwm1y9 og:image: https://api.daily.dev/og/posts/cIDWwm1Y9.png og:image:alt: proxy.golang.org allows many Go packages to be silently broken og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # proxy.golang.org allows many Go packages to be silently broken **[Drew DeVault](https://daily.dev/sources/drewdevault)** · 3 min read · 0 upvotes · 0 comments ## Summary proxy.golang.org, the default Go module proxy, caches module versions indefinitely. This means broken or removed upstream dependencies are hidden from developers who use the proxy, creating silent build failures that only surface when using GOPROXY=direct. The author argues this encourages bitrot across the Go ecosystem, creates dependency on Google's infrastructure, and raises privacy concerns. The post also notes the Go module mirror has been DDoS-ing the author's servers since February with no meaningful response from the Go team. Developers can audit their packages by setting GOPROXY=direct, clearing the local cache, and rebuilding. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [proxy](https://daily.dev/posts/proxy-aiqzpviwl) · Andrew Nesbitt · 1 upvotes · 0 comments - [what the go proxy has been doing](https://daily.dev/posts/what-the-go-proxy-has-been-doing-nxonmhjg8) · Lobsters · 0 upvotes · 0 comments - [The Dependabot Proxy is now open source with an MIT license](https://daily.dev/posts/the-dependabot-proxy-is-now-open-source-with-an-mit-license-gcl7f5nxs) · GitHub Changelog · 0 upvotes · 0 comments --- Tags: [#golang](https://daily.dev/tags/golang) [View this post on daily.dev](https://daily.dev/posts/proxy-golang-org-allows-many-go-packages-to-be-silently-broken-cidwwm1y9) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"proxy.golang.org allows many Go packages to be silently broken","url":"https://daily.dev/posts/proxy-golang-org-allows-many-go-packages-to-be-silently-broken-cidwwm1y9","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/proxy-golang-org-allows-many-go-packages-to-be-silently-broken-cidwwm1y9"},"datePublished":"2026-03-31T12:28:34.398Z","dateModified":"2026-03-31T12:43:55.129Z","description":"proxy.golang.org, the default Go module proxy, caches module versions indefinitely. This means broken or removed upstream dependencies are hidden from...","image":"https://media.daily.dev/image/upload/s--2-1xRawN--/f_auto/v1722860399/public/Placeholder%2011","thumbnailUrl":"https://media.daily.dev/image/upload/s--2-1xRawN--/f_auto/v1722860399/public/Placeholder%2011","isAccessibleForFree":true,"articleSection":"Drew DeVault","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Drew DeVault","logo":"https://media.daily.dev/image/upload/s--BGhGBu0U--/f_auto,q_auto/v1774960025/logos/drewdevault?_a=BAMAMiWQ0","url":"https://daily.dev/sources/drewdevault"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/proxy-golang-org-allows-many-go-packages-to-be-silently-broken-cidwwm1y9","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"golang","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Drew DeVault","item":"https://daily.dev/sources/drewdevault"},{"@type":"ListItem","position":3,"name":"proxy.golang.org allows many Go packages to be silently broken"}]} ```