Proposal: Secure the Public Go Module Ecosystem

The Go module mirror and checksum database provide faster, verified downloads of your Go dependencies.

Binary Transparency - Building Trust in the Software Supply Chain.