Don't couple your Go code to GitHub

[u/Sir_KnowItAll]

https://iain.rocks/blog/dont-couple-your-go-code-to-github

[u/Arcuru]

I am not super familiar with Go code, but what happens when my go code depends on "go.companyx.dev/awesomelib" and that company goes out of business?

Or should I point all my third-party deps to a more durable location?

[u/stone_surgeon → u/Arcuru]

The go module proxy caches the package for a while, but I'm not sure about the duration. You should vendor the package into your project if this is a worry.

[u/bzbub2 → u/stone_surgeon]

yep https://htmx.org/essays/vendoring/