4 ms·
Why? I can't imagine building a serious product and being dependent on a github repo I don't personally control. It is terror inducing to even consider any re
by MetaCosm 13y ago
Why? I can't imagine building a serious product and being dependent on a github repo I don't personally control. It is terror inducing to even consider any real project that would be... even if you are based on a tag or a hash, the author can destroy or rewrite it.
- deleted 13y ago[deleted]
- numbsafari 13y agoAgreed. Also, if your dependency graph starts to get unmanageable, it's usually a sign you've made a mistake somewhere (likely by relying on something else that's poorly designed). If you keep your system simple and don't rely on too many "kitchen sink" frameworks, then keeping your own source tree of your dependencies isn't that much different from maintaining a local repository of the same code in compiled form (with the added benefit of having the original source available).