I personally found vendoring the external libraries into “/vendor” was quite useful to be able to explore/read the code that was being used. I find it odd that isn’t default behavior.