**@euant**

> In addition to what you've mentioned, Nimble also really could do with having 
> the ability to vendor packages within a package/application rather than 
> always relying on a global package store.

It seems that a lot of people really want vendoring. But to me it just seems 
like a poor man's lock file.

> Without vendoring, I can very easily release a v1.0.0 tag which you might 
> then install - there's nothing stopping me from then later moving that tag to 
> an entirely different commit and force pushing it to the repository. With 
> vendoring, you can always check in the exact package versions you're using to 
> build your application.

So the idea is to also commit these vendor folders? I guess hard drive space is 
cheap these days, but still... at this point you can just as well copy and 
paste the dependencies into a `vendor` folder, add `--path:vendor/` to your 
config.nims or nim.cfg file and call it a day. Is there even a need for a 
package manager?

Reply via email to