Why “vendoring” is being discussed
The most recent Hacker News stories and comments contributing to this topic's mentions.
This is untrue and if you thought about what you're claiming for a second this should be obvious. The MIT license let's someone do any of the things outlined there subject only…
by blochist · Oct 1, 2026
In the new world of AI and all the supply chain attacks on centralised package managers, I think circling back to vendoring probably makes more sense than depending on the netwo…
by ljm · Sep 28, 2026
I've been saved by the commit hash in the dependency when reviving an old Python project. I could locate a fork of the repo and use the same version to get the code going again.…
by dirkc · Sep 28, 2026
I also think that vendoring or at least caching your dependency tree somewhere local, so you can build everything from ground up to a known state. It's not only an issue of avai…
by bayindirh · Sep 28, 2026
Definitely had a private GitHub dependency disappear once. Vendoring saved us a massive headache downstream.
by tugback · Sep 28, 2026
Well vendoring is a technical solution of the same caliber as adding module aliases to the go.mod. By that I mean, sure, it keeps the code compiling right now , but all your sou…
by mort96 · Sep 28, 2026
Interest
Proportion of Hacker News items mentioning "vendoring" over time.
Mentions
Total number of Hacker News items mentioning "vendoring" over time.