[voltagex_]

For a production app, wouldn't you "pin" your dependency to a particular version? I know I wouldn't be allowed to track master in my workplace.

[chrisbroadfoot]

Yes! Please do that.

Use something like git-vendor: https://github.com/brettlangdon/git-vendor