Location of manifest and lock file (document)

[nathany]

May be worth documenting the reasoning in an FAQ for whoever asks.

Placing these files inside vendor/ would concretely bind us to vendor/ in the long term. We prefer to treat the use of vendor/ as an implementation detail. - @sdboyer, go package management list

Split off from #168 (naming of those files).

[sdboyer]

There's lots of reasons we could give, but IMO the one you quoted is pretty definitive - if there's a real possibility of moving away from vendor (and there is), then that's pretty much disqualifying.

So the only real question for this issue is where we document it. Right?

[nathany]

FAQ in the README?

Maybe some other reasons are worth documenting too. Actually having them located somewhere other than past Go tools could be a benefit (avoid name collisions).

[sdboyer]

Oh, this is done 😄