logoalt Hacker News

yegletoday at 2:05 AM2 repliesview on HN

Vendorizing using git submodule should be a robust mitigation for this problem.


Replies

raggitoday at 2:21 AM

subtree is better for this case, you want to encourage actual reading before running. reading won't catch everything but it catches a lot, and the burden isn't as high as people always complain about before they try it.

saghmtoday at 2:51 AM

This feels like the modern analog of the king, the mice, and the cheese. What cats do I need to bring in to eat my git submodules?