Slightly worried by the use of TOML file formats here - this is an incomplete spec which is rarely used, for a config format the advantages over json are not significant, not enough IMO to outweigh the cost of adding yet more dependencies on another inchoate file format. It isn't so important but it seems troubling that they've chosen this not widely used format for config files which humans will rarely touch. The repeat of the key [[dependencies]] lots of times is really ugly for a start so this format is not obviously better, and comments in json could just be added with a "comment" key.

This tool should have the minimum surprises if it is to effectively replace go get in the long term. Hopefully eventually they will give us a subcommand like go deps to freeze the dependencies using the go tool - this doesn't have to be complicated.