use gopm to manage deps