Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

x/pkgsite: Beego package page contains a link to a GAMBLING advertisement #58328

Closed
informatik01 opened this issue Feb 5, 2023 · 4 comments
Closed
Labels
FrozenDueToAge NeedsInvestigation Someone must examine and confirm this is a valid issue and not a duplicate of an existing one. pkgsite
Milestone

Comments

@informatik01
Copy link

On the Beego package page (a fork of the Beego framework), the link in the "More info at" section leads to some Indonesian online gambling advertisement page.

Here is this Go package page:
https://pkg.go.dev/github.com/astaxie/beego

And here is the related "project" page (it redirects to a gambling advertisement page):
http://beego.me/

Please address this issue accordingly.

@informatik01 informatik01 changed the title URL on the Beego package page leads to an online GAMBLING advertisement Beego package page contains a link to a GAMBLING advertisement Feb 5, 2023
@ianlancetaylor
Copy link
Contributor

CC @golang/pkgsite

I think the real site is https://pkg.go.dev/github.com/beego/beego, but it has the same problem. The README displayed at pkgsite is not the README on GitHub: the pkgsite one has the bad link to beego dot me.

@ianlancetaylor ianlancetaylor changed the title Beego package page contains a link to a GAMBLING advertisement pkgsite: Beego package page contains a link to a GAMBLING advertisement Feb 5, 2023
@ianlancetaylor ianlancetaylor changed the title pkgsite: Beego package page contains a link to a GAMBLING advertisement x/pkgsite: Beego package page contains a link to a GAMBLING advertisement Feb 5, 2023
@gopherbot gopherbot added this to the Unreleased milestone Feb 5, 2023
@ianlancetaylor ianlancetaylor added the NeedsInvestigation Someone must examine and confirm this is a valid issue and not a duplicate of an existing one. label Feb 5, 2023
@informatik01
Copy link
Author

informatik01 commented Feb 5, 2023

@ianlancetaylor

I think the real site is https://pkg.go.dev/github.com/beego/beego

Seems so. I mentioned that the reported project is a fork of the original Beego etc.

What is interesting that on the GitHub page of the original Beego project, there is a link to the supposedly official home page [https://beego.vip] which is currently "unavailable" / down.

Didn't expect such situation for a project which is mentioned in multiple reviews on the internet as a enterprise level web framework etc.

@ianlancetaylor
Copy link
Contributor

OK, the reason that bogus link shows up on the astaxie/beego page is that the last tag in that repo is https://github.com/astaxie/beego/tree/v1.12.3, and in that tag the README has the bogus link.

In other words, pkg.go.dev is correctly reflecting the source of the package. This should be fixed by the package. I'm going to close this as I don't think there is anything to change on pkg.go.dev. Thanks.

@ianlancetaylor ianlancetaylor closed this as not planned Won't fix, can't repro, duplicate, stale Feb 6, 2023
@informatik01
Copy link
Author

I understand that on the "Go package" side everything is correct. Just sad that there is a way for placing unexpected advertisements or any unrelated and potentially harmful information without any consequences.

Next time it could be some scam / phishing site and no penalties for that.

But anyways...

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
FrozenDueToAge NeedsInvestigation Someone must examine and confirm this is a valid issue and not a duplicate of an existing one. pkgsite
Projects
None yet
Development

No branches or pull requests

3 participants