I remember people pointed out that Google already knows this, unless you go out of your way to use a company wide GOPROXY. Every time you sync your dependencies with go mod, you tell google what you're doing.