> almost every basic function needs to be imported from some third party, which also feels not so safe, as a sys admin Go (and most languages) also supports im

> almost every basic function needs to be imported from some third party, which also feels not so safe, as a sys admin Go (and most languages) also supports importing a lot of packages from third-parties. Just pin your dependencies to specific known versions and do hash verifications.