Most of my coworkers don’t commit the vendor folder. With go1.11 (modules) what future vendor can expect?
The best thing of commiting the vendor is the time on CI pipelines, no need to populate the vendor on all steps.
I guess one thing that is good about the vendor folder that the modules don’t give you is the security that if the author of some library decides to delete it from GitHub (or where ever it is located) you still have a copy and can later decide to move to something else. (or keep the deprecated library).