> 3 years? 68 lines of code. Is it not safer at this point to vendor that code? Why, though? There is no bitrot or build flakiness with unnecessary changes if

> 3 years? 68 lines of code. Is it not safer at this point to vendor that code? Why, though? There is no bitrot or build flakiness with unnecessary changes if no changes happen, so what's the actual argument for this? Why is it missing from the article?