Please depend on a single quic-go implementation

[zedinosaur]

v2ray-core currently depends on both github.com/apernet/quic-go and github.com/quic-go/quic-go. It would be great to standardize only on github.com/quic-go/quic-go. I was looking at updating the Debian package and this divergence will be a problem in that context.

[xiaokangwang]

Thanks for working on packaging V2Ray. Would it be possible to package a "go mod vendor" version of the software and considers all dependencies bundled?

[zedinosaur]

Just to be clear an older version (4.34.0) is already packaged in Debian. Generally Debian strongly prefers not vendoring dependencies of software since it increases duplication and makes security updates harder.

[xiaokangwang]

Thanks for the explanation. Sadly these two versions of quic serves different purposes, the one for hysteria and another for quic transport. V2Ray supports selective compilation and if it is absolutely necessary features can be removed to avoid dependencies that cannot be packaged.