The AGPL Trap That Forced an Identity Provider Migration (opens in new tab)

Running an unmodified AGPL binary can be safe. Importing its Go module is a different risk. That distinction cost me six weeks.