Open jenmei opened 5 years ago
Bill thinks we should checkin vendor, but the dep faq says that there are pros and cons of both.
On the one hand, I don't really like the idea of checking in 3rd party code if it can be reliably re-created.
On the other hand, unlike npm or ruby gems, the code isn't published to a registry – people just pull things directly from repos, which, unlike registries, are completely under the control of the authors. So if an author deleted their repo, it would cause all kinds of problems.
I guess all things considered, checking in is a better guarantee. But I think if we do that we should be careful of mixing up vendor changes and our commits.