--- title: "Go's new vulnerability analysis tool" publication: "Go Weekly" issue: 427 published_at: "2022-09-09" canonical_url: "https://golangweekly.com/issues/427" --- Plus visualizing live runtime metrics, creating Sudoku puzzles, and new generic queues. | #​427 — September 9, 2022 [Unsubscribe](https://golangweekly.com/leave/*|UID|*)|[Read on the Web](https://golangweekly.com/issues/427) The _Go Weekly_ Newsletter [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60/na9vnzofmlwcfemvcama.jpg)](https://go.dev/blog/vuln) [Go's New Vulnerability Management Tool: `govulncheck`](https://go.dev/blog/vuln) — The core team has unveiled a _very_ helpful command-line tool that can scan your code for vulnerabilities, _only_ surfacing the ones that actually affect your code base. We can see this being a standard part of any build pipeline, so try it out and give your feedback. Julie Qiu (Go Team) [A Complete Guide to Logging with Zerolog](https://betterstack.com/community/guides/logging/zerolog/) — This is a _very_ extensive tutorial, and if you want a high-performance, zero-allocation logging library, [Zerolog](https://github.com/rs/zerolog) comes well recommended. Better Stack Team [![\](https://copm.s3.amazonaws.com/d66ea58f.png)](https://www.ardanlabs.com/careers/mid-level-and-senior-backend-engineer.html/?utm_source=Cooperpress%20PrimaryV4) [Gophers - Opportunity is Knocking](https://www.ardanlabs.com/careers/mid-level-and-senior-backend-engineer.html/?utm_source=Cooperpress%20PrimaryV4) — We’re a premier software engineering firm looking for mid to senior level engineers to help us develop advanced software solutions and applications in Go. Got at least 1 year of professional Go experience and located in the Americas or Western Europe? We want to hear from you. Ardan Labs sponsor [Go Developer Survey 2022 Q2 Results](https://go.dev/blog/survey2022-q2-results) — Over time, the Go team has increased the cadence of its community surveys, and while only about six thousand gophers responded to this one, the results remain interesting: - Most developers are happy Go has both generics and fuzz testing support, but "don't have a specific need for them right now." - The "top challenge" has shifted from generics to error handling. - Avoiding dependencies with known vulnerabilities is the top security-related challenge. [Sudoku, Go and WebAssembly](https://eli.thegreenplace.net/2022/sudoku-go-and-webassembly/) — Sudoku! Now we’re talking :-) (Any fellow [Cracking the Cryptic](https://www.youtube.com/c/CrackingTheCryptic) fans here?) Eli explains his recent experiments with generating Sudoku puzzles from Go for his family to play. Eli Bendersky - [Bringing Structured, Leveled Logging to the Standard Library?](https://github.com/golang/go/discussions/54763) ↳ A discussion on the official Go repo. - [The Story of DigitalOcean's Rails to Go App Migration](https://www.digitalocean.com/blog/inside-digitaloceans-reserved-ip-rails-migration) ↳ The hows and whys of taking a key internal app from Rails to Go-powered microservices. - [A Portal Between Ruby and Go (using FFI)](https://dario.cat/en/posts/portal-between-ruby-and-go/) ↳ More Ruby to Go migration manoeuvring. - ▶️ [Practical Memory Profiling](https://www.youtube.com/watch?v=6qAfkJGWsns&t=172s) ↳ Bill Kennedy's GopherCon Europe 2022 talk. We'll be featuring more talks from the event next week. 🛠 Code & Tools [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60/wvhmwye0jkr3za8len51.jpg)](https://pkg.go.dev/github.com/arl/statsviz) [Statsviz: Visualize Go Runtime Metrics in the Browser](https://pkg.go.dev/github.com/arl/statsviz) — A major rewrite that now uses `runtime/metrics` rather than `runtime.MemStats` for more precise, real-time results. [GitHub repo](https://github.com/arl/statsviz). Aurélien Rainone [Lane 2.0: Generic PriorityQueues, Queues, Stacks, and Deques](https://github.com/oleiade/lane) — Aims to provide ‘textbook’ implementations of several queue data structures. v2.0 introduces [support for generics](https://github.com/oleiade/lane/releases/tag/v2.0.0) and you can now use custom types without reflection. Théo Crevon [Deliver a Chat Experience That Won't Disappoint with Stream](https://getstream.io/chat/?utm_source=GolangWeekly&utm_medium=Promoted_Newsletter&utm_content=Developer&utm_campaign=GolangWeekly_September2022_Chat_klmh22) Stream sponsor [Viper: A Complete Config Solution for Go Apps](https://github.com/spf13/viper) — A mature project used by projects like Hugo and Docker Notary for their configuration needs. It’s been a couple of years since we linked to it and [1.13.0](https://github.com/spf13/viper/releases/tag/v1.13.0) has just dropped – Go 1.19 support has been added, and etcd3 is now supported as a remote provider. Steve Francia [sx: Fast, Modern, Easy-to-Use Network Scanner](https://github.com/v-byte-cpu/sx) — Handles ARP, TCP, UDP, ICMP scans and more. Takes a very Unix-y approach and boasts being 30x faster than nmap. v-byte-cpu [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60/wdxmaegnpw8unewo1x9s.jpg)](https://github.com/charmbracelet/lipgloss) [Lip Gloss 0.6: Style Definitions for Nice Terminal Layouts](https://github.com/charmbracelet/lipgloss) — Provides a ‘fluent’-style API for stylizing text output from your programs in a rather pretty way. Charm [Participle: A Parser Library for Go](https://github.com/alecthomas/participle) — Participle takes the familiar approach of using struct field tags to define a grammar, so if you’ve used `encoding/json`, you’re well on your way. Alec Thomas **⚡️ QUICK RELEASES:** - [Echo 4.9](https://github.com/labstack/echo) ↳ High performance, minimal web framework. - [Multi Progress Bar 8.0](https://github.com/vbauerster/mpb) ↳ Progress bar option for CLI apps. - [goleak 1.2](https://github.com/uber-go/goleak) ↳ Goroutine leak detector from Uber. - [Scany 1.2](https://github.com/georgysavva/scany) ↳ Scan data from a database into structs. - [FastHTTP 1.40](https://github.com/valyala/fasthttp) ↳ Performance tuned HTTP package. - [Weaviate 1.15](https://github.com/semi-technologies/weaviate) ↳ 'ML-first' vector search engine. - [Mo 1.2](https://github.com/samber/mo) ↳ Monads and popular FP abstractions powered by generics. Jobs [Golang Engineers — 100% Remote (North/South America & Europe)](https://www.ardanlabs.com/careers/mid-level-and-senior-backend-engineer.html) — We’ve got several opportunities for Go devs (some working directly with Bill Kennedy!) and would love to hear from those looking for new challenges in distributed systems projects. Ardan Labs [Find a Job Through Hired](https://hired.com/join/?utm_source=newsletter&utm_medium=sponsor&utm_campaign=%28b2c%29%28l-all%29%28r-all%29%28cooper-golangweekly%29&utm_content=find-your-next-job) — Create a profile on Hired to connect with hiring managers at growing startups and Fortune 500 companies. It's free for job-seekers. Hired Curated by Peter Cooper and [Glenn Goodrich](https://twitter.com/ruprict). [Change your email](https://golangweekly.com/edit_subscription/*|UID|*) or[Stop getting the newsletter](https://golangweekly.com/leave/*|UID|*) © Cooper Press Ltd · Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom