For legal and moral reasons any package repository needs to allow deleting packages. Either because the content violates some laws or because the author decided he no longer wants to publish his stuff.
In practice removal of packages happens so rarely that it's not a problem. At least on github you can find forks of go-bindata.
6 comments
[ 2.5 ms ] story [ 20.4 ms ] threadNot cloning your dependency tree or maintaining a local fork precisely so other maintainers' nonsense can't hurt you is the problem.
For legal and moral reasons any package repository needs to allow deleting packages. Either because the content violates some laws or because the author decided he no longer wants to publish his stuff.
In practice removal of packages happens so rarely that it's not a problem. At least on github you can find forks of go-bindata.