I see where you&#x27;re coming from and agree that commit IDs aren&#x27;t very friendly, but from a technical perspective it solves the same problem of having dependencies on specific versions of software.<p>Now that I&#x27;ve looked into glide a little more I&#x27;m curious: since the main benefit is the ability to use semantic versioning to manage your dependencies, why do you use a glide.lock file instead of making the &quot;glide&quot; command a simplified way to update&#x2F;maintain vendor submodule references with semantic versioning? Then users wouldn&#x27;t need the glide tool, only developers, and users could just use standard go tools.