Dependency Management
summary
Argues that "go get" breaks reproducible builds and shows four concrete strategies: an abandoned organization-vendoring experiment that created many repos and painful import rewrites and tagging headaches; a working project vendoring layout used in production that requires import-rewriting but produces single-repo releases; a new tool GB that builds a self-contained workspace, avoids import rewrites and the builds work though it lacks a race detector; and the Go 1.5 vendor flag demoed with go vendor to import into vendor/ and produce reproducible builds.
AI-written summary · about
chapters (19)
- 0:00Start
- 1:02Introduction
- 1:51Project Code Four
- 2:25Dependencies
- 3:01Constraints
- 4:24Organization Structure
- 5:15Organization External package imports
- 6:12Organization External package rewrites
- 7:25Organization Disadvantages
- 9:11Organization Advantages
- 9:46Project Vendoring
- 11:29Project External package imports
- 12:41Project External package rewrites
- 13:44Project Disadvantages
- 14:30Project Advantages
- 17:00Language vs Tooling
- 22:53gb: Vendor plugin
- 25:53gb: Advantages
- 35:02Go 1. Disadvantages
