The Go client API for Vault recently got a huge list of dependencies and many are not related to a library that is just a wrapper around REST API calls.
Details: Go API: too many dependencies · Issue #14017 · hashicorp/vault · GitHub
Apparently, the Vault development team considers that bloatware is not a bug but a feature.
Am I the only one to disagree?
As a user of that library, I have to take care of managing in my program the module versions brought by the packages I use. 45 modules is a huge list I have to take care of.