I think dependency management generally is madness, highlighted by things like left-pad. But golang's 'go mod vendor' is a good feature and a step in the right direction. On one side, there needs to be a balance between giving the programmer control - not being victim to disappearing packages - and allowing them to pull upstream updates. On the other side, programmers need to start taking responsibility for the code they use: dependencies aren't for free. I think the future of dependency management is somewhere between these two sides. #programming