Why are we vendoring dependencies?

[VaiTon]

In 66ebaf9 a vendor folder was added with all the Go dependencies that the project use. Why do we do that?

[wargio]

So we ensure that the bin can be always reproduced.

[VaiTon]

Wouldn't the go.sum have the same objective?

[wargio]

Yes and no. the objective is to download one repo and have everything.

[VaiTon]

Understood, thanks! Any objections to adding a brief explaination in the project README about this?

[wargio]

No objection