manage Go dependency using goat