Remove large vendor/ sub-directory? #1283

Hi! I help maintain this for Debian, and we currently filter out the vendor/ sub-directory to avoid duplicate source copies. As far as I can tell, the standard for most Go packages I've seen is to not put copies of the dependencies into the git repository, but to rely on the Go compiler to find external packages. Would you consider removing the vendor/ top-level directory entirely? I think this would simplify code audits of your project, as one would not have to read through all external source codes which isn't really coming from this project.

Thanks,
Simon