Rosdep sources list

I was wanting to get some feedback on how other people are using rosdep in a production environment. Do most people use a rosdep database that is a fork of the main database or just use the main database for their projects?

There have been a couple times that the rosdep database has updated changing the dependency structure of my project. So far this has only been helpful, with the changes making improvements or picking up bugfixes that I wasn’t aware of, but this could just as easily create problems with my project switching from pip to apt for it’s dependencies. In an effort to avoid this I plan to use a fork of the main database. Is this practice common or not really recommended?

Although this could be an interesting discussion, I think you might get more responses to this question if you ask it over at (Link your question here so we can see what happens.)