To Vendor, or Not to Vendor

Vendoring fixed the Sirupsen problem. PR noise is a small price to pay for reliable CI/CD in the face of an unstable network.

As the dependency tree grows, the chances of at least one package among them blowing up at the resolution step approaches 1.0