I'm not the parent but your question is completely valid -- trying to get dependencies of dependencies sends us down a very deep rabbit hole.
This is usually where dynamic linking and shrinkwrapping[1]/vendoring[2] start entering serious discussions.
[1] http://blog.goguardian.com/nerds/shrinkwrap-not-just-for-mur...
[2] https://github.com/tools/godep
I'm not the parent but your question is completely valid -- trying to get dependencies of dependencies sends us down a very deep rabbit hole.
This is usually where dynamic linking and shrinkwrapping[1]/vendoring[2] start entering serious discussions.
[1] http://blog.goguardian.com/nerds/shrinkwrap-not-just-for-mur...
[2] https://github.com/tools/godep