When adding new dependencies using dep ensure -add <package>
I see dep
adding the complete repository of the package, instead of just the parts I require.
For example I added aws-sdk-go and dep ensure
put 87MB of files into my vendors folder, even though I only use the AWS Secrets Manager service.