[aaomidi]

This is why you should vendor your dependencies. They are part of your codebase at that point.

[speedgoose]

I have better things to do though. This feels unnecessary.

[aaomidi]

“go mod vendor”.

That’s it. That’s all you need to do.

[speedgoose]

Oh like this. I’m not sure I would enjoy overloading my git repository and merge requests with the dependencies. I was thinking about having a proxy or forking all the dependencies.

[aaomidi]

The thing is though that those dependencies are part of your code. Seeing how they're changing through PRs and commits is actually a feature IMHO and not a bug.