Comment by aczerepinski

I don't think your impression of the current state of dependency management in Go is accurate. Pretty much everybody uses this:

https://golang.github.io/dep/docs/Gopkg.lock.html