3 ms·
Vendorizing using git submodule should be a robust mitigation for this problem.
by yegle 5mo ago
Vendorizing using git submodule should be a robust mitigation for this problem.
- saghm 5mo agoThis feels like the modern analog of the king, the mice, and the cheese. What cats do I need to bring in to eat my git submodules?
- raggi 5mo agosubtree is better for this case, you want to encourage actual reading before running. reading won't catch everything but it catches a lot, and the burden isn't as high as people always complain about before they try it.
- no-name-here 5mo agoWouldn't locking dependencies be far more likely for dependency-users to do, and be approximately as effective for those that do?