Lots of vendored modules #205
Description
Trying to bring up csctl up to using the latest upstream dependencies, I see lots of vendored modules in vendor/. So we carry copies of all that code in our repo, with all the perils of having outdated code there.
Without dependabot and go mod vendor, this would be crazy and even with it, it's only bearable from my perspective. Why do we do this?