Build vs Pull Dependencies

Build dependencies internally or pull from upstream.

Pull (default)

Faster. Less maintenance.

Risk: upstream changes break.

Build internally

Slower; more maintenance.

Control over what ships.

Hybrid

Pull most; build security-critical or unstable.

Most teams converge here.