I fear one of these days someone will copy a legit package and make it onto your search results, and then the Go tools pull in something extra.