The depaware command makes you aware of your dependencies by putting them in your face in git and during code review. The idea is that you store the depaware output next to any desired packages or binaries and check them in to git, making it a CI failure if they're out of date, and thus make you aware of dependency changes during code review. See https://github.com/tailscale/depaware