Git Submodules as a Package Manager
Summary
Git submodules are analyzed as a potential package manager, with the gitlink acting as a lockfile and .gitmodules as the manifest. The piece discusses how submodules and worktrees interact, the CI workflows around dependency updates (Dependabot/Renovate), and security CVEs tied to submodule usage, highlighting the trade-offs and practical challenges of treating submodules like a package manager.