Do you have production applications running that do exclude their vendor folder? Does this work reliably? How do you handle dependencies that do not use semver?
What would be one of the cases where you'd say you need to commit vendor?
What would be one of the cases where you'd say you need to commit vendor?
Other than working around that issue the only case where you actually need to commit vendor (at the moment) is when you want your project to compile reproducibly by only running "go get project". If you are fine with telling your user to run "dep ensure" (or make) first this is not needed. This is not usually an issue when working with colleagues, but can be nice for publicly released projects.