nixpkgs works like this when you pin to a specific git commit. It's effectively like vendoring all of your dependencies into your source control system, but wit

nixpkgs works like this when you pin to a specific git commit. It's effectively like vendoring all of your dependencies into your source control system, but without the overhead of storing everything locally (instead just storing hashes of dependencies).