More updates.

.gitignore

@@ -2,3 +2,4 @@
 /vendors
 /cmd/secspy/secspy
 /secspy
+/vendor

Gopkg.toml

@@ -0,0 +1,42 @@
+# Gopkg.toml example
+#
+# Refer to https://golang.github.io/dep/docs/Gopkg.toml.html
+# for detailed Gopkg.toml documentation.
+#
+# required = ["github.com/user/thing/cmd/thing"]
+# ignored = ["github.com/user/project/pkgX", "bitbucket.org/user/project/pkgA/pkgY"]
+#
+# [[constraint]]
+#   name = "github.com/user/project"
+#   version = "1.0.0"
+#
+# [[constraint]]
+#   name = "github.com/user/project2"
+#   branch = "dev"
+#   source = "github.com/myfork/project2"
+#
+# [[override]]
+#   name = "github.com/x/y"
+#   version = "2.4.0"
+#
+# [prune]
+#   non-go = false
+#   go-tests = true
+#   unused-packages = true
+
+
+[[constraint]]
+  name = "github.com/pkg/errors"
+  version = "0.8.1"
+
+[[constraint]]
+  name = "github.com/spf13/pflag"
+  version = "1.0.3"
+
+[[constraint]]
+  name = "github.com/stretchr/testify"
+  version = "1.3.0"
+
+[prune]
+  go-tests = true
+  unused-packages = true

README.md

@@ -9,8 +9,6 @@ The logic is there, and so are the bugs.
 
 Still working on it. Lots of docs to come. I hope.
 
-The only external vendor (so far) is "github.com/pkg/errors" and we may work this out with custom error types. I dunno.
-
 ffmpeg is also used if you want video snippets.
 
 my server doesn't have auth enabled, so I really have no idea if this works with a password. lemme know?