Vendor dependencies into this repository

[agoode]

We need to include all the source dependencies for this project.

Go source should go into vendor/. Other sources will go into third_party/.

[jacobmarble]

Windows installers (WiX) require that the license agreement be in RTF format. When source dependencies are added which are used by the Windows connector, their licenses should be appended to that RTF file.

[sicklittlemonkey]

Has anybody looked into this yet? For go the godep tool looks promising, but I'm doing the "third party" ones first.

Obviously the dependencies can change, so I threw together a bash script to find the (third party) pacman packages from the dependency filename, but the pacman cache archives include binaries as well as source. If there's no better way to get the sources I'll unpack and process those.

Please let me know if I'm barking up the wrong tree.

[sicklittlemonkey]

So here is a script I spent too much time on considering how little it does. (Limited bash knowledge.)
get-sources.sh.txt

It fetches almost all the dependencies' sources (which aren't in the packages) and some of the licenses files. Only two thirds of the packages have the license files inside, so checking them all and collecting the rest manually was a major pain. (Cygwin can install source packages, so I have no idea why pacman can't.)

Do you want the licenses or the Excel spreadsheet which I used to track my progress?

[jacobmarble]

@agoode I have been doing some vendoring lately. I'll send a PR.