> Vendoring dependencies is a simple way to ensure consistent build inputs
If consistent build inputs is your concern may I ask why using lock files wasn’t enough? That’s a problem they were designed to solve.
If consistent build inputs is your concern may I ask why using lock files wasn’t enough? That’s a problem they were designed to solve.
(Perhaps they've solved this in the last couple of years. I've been staying away from that ecosystem... too much growing in it...)
On reflection, it seems more like I'm papering over network issues. Perks of working in an enterprise company I guess.
In a discussion about Skub, no one need to explain why the Skub-powered approach isn't good enough. It is the duty of anyone pushing Skub to explain exactly what makes Skub so special to the point that we need to have Skub in our lives.