Sure. `godep restore` is fine for bootstrapping. We're well aware of the problems Go gives us by not having version numbers. :) It's a question of who we're optimizing for: for development we absolutely want to `go get -u ./...` so we make sure we're still compatible with master of all of our dependencies. For someone grabbing Garden for the first time `godep restore` is fine.