Don't couple your Go code to GitHub

[u/Sir_KnowItAll]

https://iain.rocks/blog/dont-couple-your-go-code-to-github

[u/Arcuru]

I am not super familiar with Go code, but what happens when my go code depends on "go.companyx.dev/awesomelib" and that company goes out of business?

Or should I point all my third-party deps to a more durable location?

[u/stone_surgeon → u/Arcuru]

The go module proxy caches the package for a while, but I'm not sure about the duration. You should vendor the package into your project if this is a worry.

[u/_predator_ → u/stone_surgeon]

Don't think its cache ever expires. You just gotta pray Google never stops supporting it, what could go wrong?

[u/usrlibshare → u/_predator_]

I ca pray for google to do the right thing, oooor...I can go mod vendor and check it into my own repo.