On 11/26/2013 05:28 PM, Antoine Musso wrote:
Git submodules are a mess, needs to download code
from github/whatever.
And I tend to dislike submodules.
If we went with this option, we could just have straight Gerrit mirrors
of any git repos we wanted to bundle. When we updated the submodule, we
would also update the mirror.
That way there's no additional risk in the unlikely event someone
tampers with the third-party GitHub repo (as long as we find out before
updating our submodule/mirror).
Matt Flaschen