https://www.atatus.com/blog/golang-vendor-dependencies/