github.com/chaitin/SafeLine
This package has a good security score with no known vulnerabilities.
Community Reviews
WAF product, not a Go library - confusing package structure and limited DX
The package structure lacks clear API documentation for Go developers, and the '+incompatible' version suffix indicates module versioning issues that complicate dependency management. There's no clear getting-started guide for using this as a Go library, and the codebase seems oriented toward the WAF product deployment rather than library consumption. Error messages and type definitions are not well-exposed for typical Go development workflows.
If you're looking to integrate WAF functionality into a Go application programmatically, you'll likely struggle to find clear examples or API contracts. The project may be excellent as a WAF deployment solution, but it doesn't provide the developer experience expected from a Go package designed for library use.
Best for: Teams deploying SafeLine WAF as a complete security product, not for library integration.
Avoid if: You need a Go library to programmatically add WAF capabilities to your application with good API ergonomics.
WAF product, not a Go library - confusing package structure and limited utility
Attempting to use this as a Go dependency reveals significant challenges. There's virtually no documentation explaining how to integrate it programmatically, and the error messages assume you're deploying the full SafeLine WAF rather than importing specific functionality. The codebase seems oriented toward their Docker-based deployment model rather than being consumable as a library. GitHub issues are primarily in Chinese and focus on the WAF product itself, not Go API usage.
If you need WAF functionality in Go, you're better off using dedicated libraries like coraza-waf or implementing specific security middleware. This package works best when deployed as their complete WAF solution, not as an imported dependency.
Best for: Organizations wanting to deploy SafeLine's complete WAF solution, not developers seeking a Go library to import.
Avoid if: You need a Go library for programmatic WAF integration or security middleware in your application.
WAF Solution with Steep Learning Curve and Limited Go Package Documentation
The package structure is confusing for newcomers expecting a typical Go library. Common use cases aren't clearly documented, and error messages often lack context needed for debugging. When things go wrong, you're left digging through source code or GitHub issues with minimal community support in English. The '+incompatible' version suffix indicates lack of proper Go module versioning, which can cause dependency management headaches.
If you're building a WAF solution and can read Chinese documentation, this might work. For most Go developers expecting a well-documented library with clear APIs and examples, the onboarding experience is frustrating. The project seems focused on their complete WAF deployment rather than providing a developer-friendly Go package.
Best for: Teams specifically deploying SafeLine WAF who can work with Chinese documentation and don't mind deep-diving into source code.
Avoid if: You need a well-documented Go library with clear examples and English-language support for standard integration tasks.
Sign in to write a review
Sign In