Does GO have a dependency manager yet? last time i checked it out it was only things like go get which did a git checkout?
I doubt anything would keep working on active libraries without version locking composer / yarn seem to do this a lot better.
I am not sure about the situation of dependency management on Go atm (havent used it for a few months), but in my case if I had a pre-compiled binary, I could just fire it up without having to worry about compiling from source. I was not a big fan of the way Go handled dependency a while ago, but I am sure there are better tools out there now.
dep is being adopted as the officially "blessed" tool of choice.
Yes, not really an official solution yet, but they're getting there.