I'm creating an open source PHP project that reuses other open source code instead of reinventing the wheel. I'm using composer to pull these projects into my vendor folder. What happens if these vendors delete their repository & all traces of their code from the internet? Now composer can't download the project. Should I fork every project I'm depending on, and depend on the fork? Seems like a pain, but the only 'safe' way to ensure the vendor can't delete things my project needs to run.
Should I fork in case the upstream deletes
php;github
I wouldn't start out with the assumption that the maintainer of a third-party library that you use will pull the rug from underneath you. It is far more common that a maintainer leaves a project abandoned on the net than that they actively remove it.In the off-chance that a dependency of your project does get pulled off the net, chances are that you still have a local copy of the source code of that project somewhere in your build, test or deployment environment and you can use that to fork the project then and there.