To be fair you could track down the git repositories or tarballs and compile and install the right versions. If the author used autotools as is standard, the version number should be listed.
It's not ideal of course. I wish it were standard to build all dependencies from source and statically link a big binary like Go does.