March 2025
Intermediate to advanced
470 pages
12h 45m
English
Some companies, when bringing inbound FOSS components into their software, have a policy requiring that those inbound components be downloaded and stored locally.
The practice of maintaining and using copies of the third-party software used by the company is known as vendoring. This vendored software can be committed to the company’s version control system (usually in a /vendor or /third-party directory), kept in an internal container registry, or in some other dedicated artifact repository. When the company builds its software, it then uses these copies of the dependencies rather than going out and retrieving the latest versions from the internet (also known as upstream versions of the component). ...
Read now
Unlock full access