Do you vendor Go dependencies or lean on the package proxy?

Used to vendor for a bit, but it's messy in git. If anything disappears, it should still be easy enough to recover it from somewhere.