The way I deal with dependencies lately is I place them in a separate directory (called lib) right next to the project source itself (called src). So the projec

The way I deal with dependencies lately is I place them in a separate directory (called lib) right next to the project source itself (called src). So the project and its dependencies are the same repository and I can have peace of mind. Also, I've got a few patches for those dependencies and those commits consist of only the patch and a clear log message. This helps when the time comes to update the patched dependencies. Would I recommend this method to everyone? No. Is it useful in certain cases? Definitely yes.