6 ms·
I know solo projects always have an infinite list of "nice to haves". But personally I never skimp on vendoring dependencies. In my experience, not vendoring h
by gcommer 2y ago
I know solo projects always have an infinite list of "nice to haves". But personally I never skimp on vendoring dependencies.
In my experience, not vendoring has _always_ led to breakages that are hard to debug and fix.
Meanwhile, vendoring is quite easy nowadays. Every reasonable package manager, and even npm, can do this near-trivially.
- sethammons 2y agothe argument is always "the pr that pulls in the dependency is gross to review with dependency updates" -- and there are ways to mitigate that. I vendor dependencies. My customers want stability and that means a bit more process in managing dependencies. Easy win.