go.sum stores version information of dependent packages at the time of build so that developers and other users can build using the same version.