Skip to content

Vendor dependencies for reliably reproducible builds #7

Open
@neechbear

Description

@neechbear

As upstream dependencies change, it can be highly desirable to stash a local copy of those sources (vendor them). This is especially true if the upstream dependencies have a tendency to change more frequently than the project using them is maintained.

Metadata

Metadata

Assignees

No one assigned

    Labels

    buildBuild, packaging and CI/CD relatedhelp wantedExtra attention is needed

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions