Comment by ef2k

perfect time to drop a reminder: vendoring might seem annoying, but it's way safer than trusting a remote registry.