vendored dependencies via godep