When adding new dependencies using
dep ensure -add <package> I see
dep adding the complete repository of the package, instead of just the parts I require.
For example I added aws-sdk-go and
dep ensure put 87MB of files into my vendors folder, even though I only use the AWS Secrets Manager service.