Third party dependency management is done within Pydio Cells with Govendor. See their Github page and this very useful cheatsheet.
Thus when you clone Pydio Cells repository, you also retrieve all the Go code of the third parties that is used by the app and that is bundled within the binary that is shipped to end clients.
You can find these codes in the
cells/vendor sub folder.