@toby3d that’s a good point!
Digging deeper vendoring only makes sense for uncommon non-free packages IMO
https://stackoverflow.com/a/68544793
> Go Proxy will mitigate disappearing modules to some extent by mirroring modules, but it may not do it for all modules for all time