
In the past we needed to vendor out Go packages because there wasn't a built-in Go package manager. That changed with Go Modules, which has been stable for a while now. The Go Modules system will maintain packages versions, handle the fetching, checksuming, and keep a public cached of the source code.