Hacker News Reader

why not just copy the code from the dependency into your own sources?

Indeed, one could even automate the process, some sort of tool that automatically copies the dependency’s code, kinda like an install. I think someone already wrote such tool.

You don't believe in software licensing, do you?

Vendoring dependencies is usually not the same thing as ripping off someone else’s code.

It usually just boils down to keeping a copy of the version of a dependency you used.

Copying someone else's code and putting it in your software repository is an excellent way to find yourself violating a wide variety of open source licenses.

This is actually one of the most common causes for GPL violations. And companies have gotten into serious trouble for that.

Either rewrite the code, or maintain it as a dependency and follow the licensing rules. Don't simply copy code from it into your project unless you have explicit reason to believe that that is OK to do.

At my work we can only use BSD license as libraries.

Reply on news.ycombinator.com