use a version manager in go to lock the version of dependencies

[lhfbc]

[lhfbc]

https://github.com/golang/dep
dep was the "official experiment."

[lhfbc]

have a look at govender
https://github.com/kardianos/govendor