The author discusses the problem of dependency availability when projects rely on external hosting platforms like GitHub and Codeberg, which can go down and break builds. They compare two solutions—forking dependencies versus vendoring them—and highlight how Zig 0.17.0-dev's new dependency caching model makes vendoring trivial by storing packages as compressed archives with a local zig-pkg/ directory.
Background
The article is part of the author's broader involvement with Radicle, a decentralized code collaboration platform, and reflects ongoing concerns about centralization risks in open-source software supply chains.
- Source
- Lobsters
- Published
- Aug 9, 2026 at 09:42 PM
- Score
- 5.0 / 10