I mean, Go had vendoring and vendoring managers not unlike npm and it's node_modules.

But a language more comfortable with change implies that change is more likely - not less likely. Given pretty much every modern language has some kind of dependency management utility - I'd be surprised if Go didn't end up with one