+1 as I am also interested in this.
Was there a further discussion on this? Specifically for ros2.
I have a dependency I would rather vendor with FetchContent.
If two packages vendor different versions of the same dependency, and another package depends on both then undefined behavior can happen.
I understand this can be problem, but isn’t it fine as long as the package is a binary release and does not provide a library to be consumed downstream? This would be my case, and that too with a header-only library as a dependency. The dependency would never be exported as part of an install.
This can be considered a very specific case, but I’m just curious to know if there’s an alternative before I proceed with major refactoring work…