@lil5 And a year of refactoring a huge commercial project single-handedly due to the sudden removal of the #redis package from #GitHub taught me that it's best to keep external dependencies as close to code as possible.
Vendoring is extremely useful in self-sufficient programs, especially in CI/CD where there may be no access to the outside world. It is redundant in libraries and embedded packages.
@toby3d that’s a good point!
Digging deeper vendoring only makes sense for uncommon non-free packages IMO
https://stackoverflow.com/a/68544793
> Go Proxy will mitigate disappearing modules to some extent by mirroring modules, but it may not do it for all modules for all time