Pop Quiz: transitive dependency edition

[imjasonh]

Run a script inside a Go repo and show questions like:

1. This module transitively depends on github.com/google/gnostic through its direct dependency on:
  a.) cloud.google.com/api/container/v1
  b.) github.com/docker/docker
  c.) github.com/spf13/cobra
  d.) There is no transitive dependency

or

2. This module transitively depends on golang.org/x/crypto through its direct dependency on:
  a.) github.com/spf13/cobra
  b.) github.com/google/go-cmp
  c.) golang.org/x/oauth2
  d.) All of the above

After each one, say whether the answer is correct, and show the path(s) the module takes to depend on those packages.

[mattmoor]

FYI, depcheck shows a sample import path when it fails.

[imjasonh]

FYI, depcheck shows a sample import path when it fails.

Nice. If I ever do this I'll almost certainly steal gain useful inspiration from depcheck 😄

[mattmoor]

I go back and forth on forking it out into github.com/chainguard-dev/depcheck just so it's in its own module.

[imjasonh]

I go back and forth on forking it out into github.com/chainguard-dev/depcheck just so it's in its own module.

Please do! Otherwise:

1. github.com/imjasonh/popquiz depends on k8s.io/client-go because of its transitive dependency on:
  a.) knative.dev/pkg