I do read through the source code of any external package I use in Go.

I do the same thing in all languages.

That is why I tend to use as little external dependencies as possible.