Pants at least does something sensible with third-party deps in go