[dz0ny]

go get behaves in some ways as package manager (installs packages), it's up to the developer how it will vendor them or lock versions.