Nice that they have a separate library (gps) for resolving dependencies, in many ways that's the most difficult and least interesting part of package management - most people just need a simple solution that pulls versions reliably so that they get reproducible builds. I do think this could have been just built into the go tool from the beginning using semver.