github.com/FiloSottile/vendorcheck is a small tool that will make sure all your Go dependencies are properly vendored.
It's so simple that it serves well as a static analysis tool skeleton, so I wrote a code-along that explains how to load and play with Go packages:
Building the simplest Go static analysis tool | CloudFlare Blog (archive)
Make sure to read Alan Donovan's comment, too, to learn about two interesting related libraries.