An OBS source service: Download, verify and vendor Go module dependencies
An OBS Source Service that will download,
verify and vendor Go module dependency sources.
Using go.mod and go.sum present in a Go application,
the source service will call Go tools in sequence:
go mod download
go mod verify
go mod vendor
Then create a vendor.tar.gz populated with the contents of
vendor/
Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.
Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.