The go deps are vendored as source files, the C++ deps are vendored as artifactory tarballs rather than internet tarballs. Good practice, but the immediate motivation was to allow Saulius to build stuff in Iceland.