This is a good point. If I vendor my dependencies and upload to Github, does that give them a licence to use that code however they wish? It's interesting, bec

This is a good point. If I vendor my dependencies and upload to Github, does that give them a licence to use that code however they wish? It's interesting, because Github certainly have the right to set whatever terms they like on their website. The dependency authors certainly have the right to set the licence terms on their code, and that gives me the right to vendor their work and include it in my upload to Github. But I, obviously, don't have the right to agree to Github's terms on behalf of the dependency authors. I think the problem here is that Github assumes that everything I upload is my property, and that I have the ability to assign a licence to what I upload. This is not true for any project that vendors its dependencies.