3 ms·
> There is no way to specify a version [of an imported package] You can do this in your version-control system (e.g. git), via a process called "vendoring". It
by bboreham 10y ago
> There is no way to specify a version [of an imported package]
You can do this in your version-control system (e.g. git), via a process called "vendoring". It's ugly but, using one of the popular tools, quite workable.
- dualogy 10y ago> It's ugly What do you find ugly about it?
- kuschku 10y agoYou don’t properly separate and deduplicate dependencies, you can end up with legal issues (if you ever decide to redistribute your source), etc. One of the few dependency systems I’ve seen that work well is Gradle with Maven dependencies, using Java 9’s versioned modules. Proper versioning, proper dependencies, etc.
- bboreham 10y agoThe idea of copying multiple other repos into mine. I have used git submodules to avoid copying, but if one library has its own vendor'd copies you can end up with two versions of the same dependency. Which is even more ugly.