Indeed, vendoring is the recommended approach. App Engine was started before vendoring was really possible which is one of the reasons we provided bundled libraries. Now that pure Python libraries can be vendored, that is the best way forward.
Note that we are updating security related bundled libraries that can not be vendored (we recently updated SSL to 2.7.11). -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/google-appengine. To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/3b164d2e-386b-48a0-9f8d-f4ac02d9b735%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
