* Paul Wise: > On Tue, Mar 24, 2020 at 6:17 AM Vincent Bernat wrote: > >> Kubernetes is already using Go modules. They happen to have decided to >> keep shipping a `vendor/` directory but this is not uncommon. It is >> often considered as a protection against disappearing modules. So, there >> is nothing to be done upstream. And BTW, there are currently 616 >> dependencies, pinned to a specific version. > > I wonder if the existence of Software Heritage could convince them > disappearing modules aren't a problem, or if another service is > needed.
The required versions of the modules could disappear from Debian, though. Services like Software Heritage will not help with that.