But that's going to be true of any package manager. You're betting on Maven existing over the same timeframe as Go.

But a go-vendored repository is buildable indefinitely, and the compiler itself is easy to bootstrap.