# Go modules

Hacker Approved page: https://hackerapproved.com/p/go-modules/

6 people recommended Go modules in Hacker News comments, 4 had mixed feelings and 5 criticized it, November 2025 to October 2026. It was recommended in 7 of 12 months, in 7 threads. It does not meet the Hacker Approved badge rule.

**Verdict:** People recommend Go modules for reproducible dependency resolution built into the toolchain and for removing name squatting; critics say tooling is rough and go mod tidy can update dependencies unexpectedly.

Summary written by Claude from 19 comments.

## Why people recommend it

- Safe, reproducible dependency fetching by default (2 comments in the sample): "Go also has the kind of nice property that fetching and building modules is supposed to be safe with untrusted code." ([source](https://news.ycombinator.com/item?id=48799779)) "Go modules also offer hermetic and reproducible dependency resolution by default." ([source](https://news.ycombinator.com/item?id=46545218))
- Simple, no extra tools needed (2 comments in the sample): "There are no extra dependencies to grab your project dependencies and build it." ([source](https://news.ycombinator.com/item?id=48653461)) "I definitely found cargo and go mod to be a lot simpler to get started with" ([source](https://news.ycombinator.com/item?id=47604935))

## What people warn about

- Brittle, hard-to-use tooling (3 comments in the sample): "I haven't seen much improvement in off-happy-path tooling issues like that one to be too hopeful" ([source](https://news.ycombinator.com/item?id=47729052)) "it's a complete nightmare to work with" ([source](https://news.ycombinator.com/item?id=47723487)) "It’s half arsed, brittle and far from user friendly." ([source](https://news.ycombinator.com/item?id=49377027))
- Unexpected updates and no version pinning (2 comments in the sample): "go mod tidy will update your go modules whenever it feels it needs to and there's nothing you can do to stop it." ([source](https://news.ycombinator.com/item?id=48270920)) "we cannot "pin" versions (a personal bugbear of mine" ([source](https://news.ycombinator.com/item?id=48261193))
- Trusts dependencies to be well-behaved (2 comments in the sample): "Go modules relies too heavily on dependencies being good citizens, which is a very naive approach to dependency management." ([source](https://news.ycombinator.com/item?id=46539959)) "go can download and run unverified code" ([source](https://news.ycombinator.com/item?id=46538799))

## Other package managers people recommend

- [Nix](https://hackerapproved.com/p/nix/): 262 recommend, 84 mixed, 132 criticize
- [Homebrew](https://hackerapproved.com/p/homebrew/): 203 recommend, 51 mixed, 159 criticize
- [pnpm](https://hackerapproved.com/p/pnpm/): 98 recommend, 14 mixed, 23 criticize
- [Cargo](https://hackerapproved.com/p/cargo/): 93 recommend, 16 mixed, 97 criticize

## The badge

A product earns the Hacker Approved badge when at least 10 people recommend it, recommenders outnumber critics at least 2 to 1 (mixed feelings count toward neither side), it was recommended in at least 4 of the 12 months and in at least 5 different threads, and no single thread supplies more than half of the people who recommend it. Health and money products are never badged.

## Cite as

Hacker Approved, "Go modules", https://hackerapproved.com/p/go-modules/ (6 recommend, 4 mixed, 5 criticize; Hacker News comments, November 2025 to October 2026).

Counts updated 2 Nov 2026, with data through October 31, 2026.