gopkg.in/tools/godep.v73@v73.0.0-20160531225236-f4edf338389e/FAQ.md (about)

     1  ## Why do I need to check in `vendor/`?
     2  
     3  godep's primary concern is to allow you to repeatably build your project. Your
     4  dependencies are part of that project. Without them it won't build. Not
     5  committing `vendor/` adds additional external dependencies that are outside of
     6  your control. In Go, fetching packages is tied to multiple external systems
     7  (DNS, web servers, etc). Over time other developers or code hosting sites may
     8  discontinue service, delete code, force push, or take any number of other
     9  actions that may make a package unreachable.