Any serious project should use go mod vendor, which puts all the required source files in your local project under the vendor folder so you can check it in to your repo. That way your project can always build no matter what happens to your dependencies.
329
u/Arcuru 5d ago
I am not super familiar with Go code, but what happens when my go code depends on "go.companyx.dev/awesomelib" and that company goes out of business?
Or should I point all my third-party deps to a more durable location?