use godep for vendoring dependencies