[pkg-go] Bug#851817: Vendoring libraries

[Haruki TSURUMOTO]

Package: prometheus
Version: 1.2.3+ds2-5
Severity: serious
X-Debbugs-CC: pkg-go-maintainers at lists.alioth.debian.org

Dear maintainers,
Prometheus depends on many libraries, including source codes located
into vendor directory.
Is this a violation for Debian Policy 4.13 ?
"4.13 Convenience copies of code"
https://www.debian.org/doc/debian-policy/ch-source.html#s-embeddedfiles

Some libraries of vendor/*  had already packaged in Debian,
 (ex: golang-github-hashicorp-go-cleanhttp-dev,
golang-github-hashicorp-consul-dev)
Can't we use these instead of vendoring method ?

Regards,

-- 
Haruki TSURUMOTO
PGP Fingerprint:3718 C84E 4EDA 1B5C 4F26 8639 9D3D EE3F 63A6 000E