Go 1.11 was a big release for all of us because we got a new package management system called modules built right into the go CLI. If you tried out vgo before 1.11, you’ll be familiar with modules. There’s some really cool stuff in there, but there’s one piece that a lot of us missed that we need to pay special attention to: the download API.

We used to download dependency code directly from GitHub, and that led to major problems for the community. Over time, heavily used packages …