In summary, via gb:

    git add vendor/ && git commit

In dep:

    echo vendor >> .gitignore

Ie. Dep is designed to easily restore specific versions of packages online, like other package managers. Gb expects you just commit them.

Practically speaking I guess the manifest that dep uses makes it easier to see at a high level exactly what versions of what packages are installed and from where.