👋🏻 Can you elaborate on how the usage of these dependencies is a problem for you to adopt SpiceDB?

For the client libraries I need to mirror the gitmodules with their deps for compliance reasons. The more deps the harder this is.

github.com/jzelinskie/stringz

is actually written by one of our engineers

No worries, I was just wondering it a 3 lines saving is worth it.

would perhaps keeping a fork with vendored dependencies meet compliance criterias and be easier to mantain?

I'll get back to this next year, but I'll probaby just add a patch that removes the dependency. It is only 2 callsites