Hmm say I want to deploy something written in Go and only want a subset of the functionality it offers, is the right thing to just configure stuff down as much as possible or to just aggressively prune out most of the modules and reduce attack surface as much as possible (or I guess the secret third thing of upstreaming patches that allow more functionality to be disabled)

0

If you have a fediverse account, you can quote this note from your own instance. Search https://nondeterministic.computer/users/mjg59/statuses/115942362355477313 on your instance and quote it. (Note that quoting is not supported in Mastodon.)