Go's lock files arrived at around the same time as the proxy, before then you didn't have transitive dependencies pre baked.