DEV Community

Discussion on: He Commits Vendor! 😱

weswedding profile image
Weston Wedding

Yeah, at the very least, I feel like making sure you commit the dependencies for major versions of your final product is important. I don't feel like we should assume composer.json or package.json will even be enough 5 years from now. Online services come and go at a moment's notice.