title: Handle dependencies in Go
body: <p>In Go, if you reference another package, e.g. something on GitHub, then Go always gets the latest version from the <code>master</code> branch. While this is great for development, I guess it's a problem in production: This way a build is not reproducible.</p>
  
  <p>So, what is the correct way in Go to fix a version of a dependency, and how to handle this efficiently?</p>
  
  <p>A friend pointed me to <a href="http://godoc.org/github.com/tools/godep">godep</a>, and this seems fine, but I wanted to know what alternatives are there, and what's good / bad about godep?</p>