Hacker News new | past | comments | ask | show | jobs | submit
cxr | on: A new Go API for JSON
> there should be an easier way to "pin" a dependency, other than vendoring

You left out the part that explains why.