Hi, > And even better if you may make a simple script for updating them or > at least document this in debian/README.sources insread?
+1 For reference in case it is useful, in packages where I do vendoring I have a README with exact copy-paste steps on how update the vendored sources: https://salsa.debian.org/go-team/packages/usql/-/tree/debian/latest/debian/vendor This not only helps the next maintainer, but also helps in a potential audit for the auditor to figure out where exactly the sources came from.
