3 ms·
Hence why I check in vendor dependencies. It is wild to me that people pull fresh their dependencies on builds, trusting patch versions that really should have
by sethammons 4y ago
Hence why I check in vendor dependencies. It is wild to me that people pull fresh their dependencies on builds, trusting patch versions that really should have been major versions.
- lucasyvas 4y agoVendoring is an option, but if you place some trust in your registry a lockfile is totally fine.