Honestly, with the release of Go 1.5, I&#x27;ve taken to using &quot;go get&quot; once to download the library, copy it over into the vendor folder, remove its .git folder, and commit the whole thing to source control. It&#x27;s easier than messing with version numbers or commit hashes, and more stable than always using the latest master.