Dependency cooldowns would be a good idea for Go

Admittedly, dependency cooldowns are a good idea, generally, to help prevent supply chain attacks.