One thing that might need extra-consideration before merging: the namespacing (which happens in this function) ignores the source of the dependency, so e.g. the master branches of `github.com/basho/lager` and `github.com/Vagabond/lager` would be considered the same, same for specific tags (as long as they exist on both repos). This is probably undesirable.