{"action":"created","issue":{"url":"https://api.github.com/repos/golang/dep/issues/509","repository_url":"https://api.github.com/repos/golang/dep","labels_url":"https://api.github.com/repos/golang/dep/issues/509/labels{/name}","comments_url":"https://api.github.com/repos/golang/dep/issues/509/comments","events_url":"https://api.github.com/repos/golang/dep/issues/509/events","html_url":"https://github.com/golang/dep/issues/509","id":225876777,"number":509,"title":"Better name for [[dependencies]]","user":{"login":"sdboyer","id":21599,"avatar_url":"https://avatars3.githubusercontent.com/u/21599?v=3","gravatar_id":"","url":"https://api.github.com/users/sdboyer","html_url":"https://github.com/sdboyer","followers_url":"https://api.github.com/users/sdboyer/followers","following_url":"https://api.github.com/users/sdboyer/following{/other_user}","gists_url":"https://api.github.com/users/sdboyer/gists{/gist_id}","starred_url":"https://api.github.com/users/sdboyer/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sdboyer/subscriptions","organizations_url":"https://api.github.com/users/sdboyer/orgs","repos_url":"https://api.github.com/users/sdboyer/repos","events_url":"https://api.github.com/users/sdboyer/events{/privacy}","received_events_url":"https://api.github.com/users/sdboyer/received_events","type":"User","site_admin":false},"labels":[{"id":456574658,"url":"https://api.github.com/repos/golang/dep/labels/enhancement","name":"enhancement","color":"84b6eb","default":true},{"id":456574659,"url":"https://api.github.com/repos/golang/dep/labels/help-wanted","name":"help-wanted","color":"128A0C","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/golang/dep/milestones/1","html_url":"https://github.com/golang/dep/milestone/1","labels_url":"https://api.github.com/repos/golang/dep/milestones/1/labels","id":2220342,"number":1,"title":"Manifest and Lock committable","description":"Goal: anyone using the tool can make a project available with a committed manifest and lock, with the expectation that all future versions of the tool will be able to read and utilize that data.","creator":{"login":"sdboyer","id":21599,"avatar_url":"https://avatars3.githubusercontent.com/u/21599?v=3","gravatar_id":"","url":"https://api.github.com/users/sdboyer","html_url":"https://github.com/sdboyer","followers_url":"https://api.github.com/users/sdboyer/followers","following_url":"https://api.github.com/users/sdboyer/following{/other_user}","gists_url":"https://api.github.com/users/sdboyer/gists{/gist_id}","starred_url":"https://api.github.com/users/sdboyer/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sdboyer/subscriptions","organizations_url":"https://api.github.com/users/sdboyer/orgs","repos_url":"https://api.github.com/users/sdboyer/repos","events_url":"https://api.github.com/users/sdboyer/events{/privacy}","received_events_url":"https://api.github.com/users/sdboyer/received_events","type":"User","site_admin":false},"open_issues":5,"closed_issues":4,"state":"open","created_at":"2016-12-29T17:50:04Z","updated_at":"2017-05-03T17:06:17Z","due_on":"2017-05-15T07:00:00Z","closed_at":null},"comments":12,"created_at":"2017-05-03T03:32:22Z","updated_at":"2017-05-06T16:10:05Z","closed_at":null,"body":"The `[[dependencies]]` field name in Gopkg.toml is misleading and problematic. Most people see it and assume that it works in the same way other language package managers do - you have to declare dependencies in Gopkg.toml for `dep` to pull them in at all.\r\n\r\nBut that's not how `dep` works - import statements in the code itself are the bit that define what code is _required_. Gopkg.toml just applies rules and constraints to control how those imports are satisfied.\r\n\r\nThe key should be renamed accordingly. The two possibilities I can immediately think of are `constraints` or `rules`, though I don't especially love either. Here are some relevant considerations:\r\n\r\n1. Remember that `overrides` also exist, and supercede what we today call `dependencies`. While the name needn't necessarily reflect this relationship, it should at least not be contrary to it.\r\n2. Each `dependencies` item can specify an alternate `source` - not just the version constraint."},"comment":{"url":"https://api.github.com/repos/golang/dep/issues/comments/299649629","html_url":"https://github.com/golang/dep/issues/509#issuecomment-299649629","issue_url":"https://api.github.com/repos/golang/dep/issues/509","id":299649629,"user":{"login":"kevingo","id":1113954,"avatar_url":"https://avatars2.githubusercontent.com/u/1113954?v=3","gravatar_id":"","url":"https://api.github.com/users/kevingo","html_url":"https://github.com/kevingo","followers_url":"https://api.github.com/users/kevingo/followers","following_url":"https://api.github.com/users/kevingo/following{/other_user}","gists_url":"https://api.github.com/users/kevingo/gists{/gist_id}","starred_url":"https://api.github.com/users/kevingo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kevingo/subscriptions","organizations_url":"https://api.github.com/users/kevingo/orgs","repos_url":"https://api.github.com/users/kevingo/repos","events_url":"https://api.github.com/users/kevingo/events{/privacy}","received_events_url":"https://api.github.com/users/kevingo/received_events","type":"User","site_admin":false},"created_at":"2017-05-06T16:10:05Z","updated_at":"2017-05-06T16:10:05Z","body":"I both love `[[ constraints ]]` and `[[ package ]]`. The `[[ constraints ]]` clearly reveal its intent. And  for other popular dependency management tools, such as [Glide](https://github.com/Masterminds/glide) and [govendor](https://github.com/kardianos/govendor), the  `[[ package ]]` naming are popular used."}}
{"actor":{"display_login":"kevingo"}}