Is Vending Really a Good Choice?

The best thing about packaging is that there's so many details that matter in different contexts. I think vendoring probably should not be looked down upon as, as much as I get the sense that it is. cargo has a vendor subcommands that will vendor all your dependencies for you. So if you want to have all that code in your tree, you can, but it will also write out the hash or back to hashes again. And if you modify the vendor code, it'll go, nope, not compiling this, don't modify the stuff that's in the vendor area. It's both ways are good and have their appropriate times and places depending on what your goals are.