On 11/26/2013 05:28 PM, Antoine Musso wrote:
Git submodules are a mess, needs to download code from github/whatever. And I tend to dislike submodules.
If we went with this option, we could just have straight Gerrit mirrors of any git repos we wanted to bundle. When we updated the submodule, we would also update the mirror.
That way there's no additional risk in the unlikely event someone tampers with the third-party GitHub repo (as long as we find out before updating our submodule/mirror).
Matt Flaschen