This is a poor characterization of the issue. First of all, "do the packages come from git?" is not a real concern (similarly, "but it came from Pypi!" is not i

This is a poor characterization of the issue. First of all, "do the packages come from git?" is not a real concern (similarly, "but it came from Pypi!" is not itself a feature). The real concerns are all "what reproducibility/security guarantees does my package manager provide?". For `go get` and vanilla `pip install`, the answer is "mostly none, but this is more or less okay for newbies/prototyping--it's okay though because the packaging docs point them to the better-but-tedious things". Cargo and Go modules do a pretty good job about providing reproducibility and usability at the same time, Python's answer seems to be `pipenv` which makes some pretty great promises, but has been quite buggy/quarelsome for us so far (and it's not even "official" as far as I can tell). To characterize Go's ecosystem (but not Python's) as "throwing live chainsaws at people and berating them..." is pretty blatant dishonesty, doubly so once Go modules makes its official debut.