Go依赖管理工具

    目前版本：

    为v0.4.1

      若$GOPATH/bin不在PATH下，则需要将生成的dep文件从$GOPATH/bin移动至$GOBIAN下

      验证

      在项目根目录执行初始化命令，dep在初始化时会分析应用程序所需要的所有依赖包，得出依赖包清单

      并生成vendor目录，Gopkg.toml、Gopkg.lock文件

      1. $ dep init -v

      直接从对应网络资源处下载

      优先从$GOPATH初始化

      该命令会先从$GOPATH查找既有的依赖包，若不存在则从对应网络资源处下载

      该文件由dep init生成，包含管理dep行为的规则声明

      1. required = ["github.com/user/thing/cmd/thing"]
      3. ignored = [
      5.   "bitbucket.org/user/project/pkgA/pkgY"
      6. ]
      8. [metadata]
      9. key1 = "value that convey data to other systems"
      10. system1-data = "value that is used by a system"
      11. system2-data = "value that is used by another system"
      13. [[constraint]]
      14.   # Required: the root import path of the project being constrained.
      15.   name = "github.com/user/project"
      16.   # Note that only one of "branch", "version" or "revision" can be specified.
      17.   version = "1.0.0"
      18.   branch = "master"
      19.   revision = "abc123"
      21.   # Optional: an alternate location (URL or import path) for the project's source.
      24.   # Optional: metadata about the constraint or override that could be used by other independent systems
      25.   [metadata]
      26.   key1 = "value that convey data to other systems"
      27.   system1-data = "value that is used by a system"
      28.   system2-data = "value that is used by another system"

      Gopkg.lock

      该文件由dep ensure和dep init生成，包含一个项目依赖关系图的传递完整快照，表示为一系列[[project]]节

      常用命令

      用于确保本地的关系图、锁、依赖包清单完全一致

      dep ensure -add

      1. # 引入该依赖包的最新版本
      2. dep ensure -add github.com/pkg/foo
      4. dep ensure -add github.com/pkg/foo@^1.0.1

      将Gopkg.lock中的约定依赖项更新为Gopkg.toml允许的最新版本

      目前还在官方试验阶段，但已表示生产可安全使用

      如果出现什么问题，大家可以一起留个言讨论讨论