title: Should I check in libraries in the vendor folder that are pulled in by composer?
body: <p>I've already spent a few hours searching for an answer to my question but still haven't found a suitable answer.</p>
  
  <p>Basically, I've taken over a PHP project which uses composer to pull in third party libraries/dependencies. However, a lot of the dependencies are no longer managed and is possible that the author might remove them completely from github anytime.</p>
  
  <p>I'm currently thinking that I should check in the whole vendor folder so even if the libraries are no longer available through composer, I will still have them with me.</p>
  
  <p>Alternatively, I could fork those libraries repo and have composer to pull from my account instead. Is this acceptable?</p>
  
  <p>I would really hope to get some advice on the best method to deal with this. </p>
  
  <p>Thanks in advance!</p>