Comment by thayne
2 hours ago
> Disk is cheap
The biggest problem isn't (usually) disk space, or network bandwidth, it is that git operations slow down as the size of the repo grows. And it means that cloning or pulling the repo takes longer, which can be especially problematic for CI.
> Recursive dependencies have the same issues whether you vend them or not.
Package managers usually handle resolving recursive/transitive dependencies for you. Some have support for vendoring dependencies, but not all do. In theory, you could have similar tooling for vendoring dependencies, but in practice that often isn't the case.
These are all solvable problems IME. But it does mean you need people who are experienced at solving them or who care enough to learn.
> But it does mean you need people who are experienced at solving them or who care enough to learn.
That sounds like it's inconvenient to me.
The price of security and business continuity is the occasional inconvenience. Tale as old as time.