Yup, you vendor the dependency. I've been doing this for 20 years with basically any dependency that's close to "done" and has slowed down development and maint

Yup, you vendor the dependency. I've been doing this for 20 years with basically any dependency that's close to "done" and has slowed down development and maintenance. Having said that, I've not worked in languages where "batteries are not included"