github.com/FiloSottile/vendorcheck is a small tool that will make sure all your Go dependencies are properly vendored.

It's so simple that it serves well as a static analysis tool skeleton, so I wrote a code-along that explains how to load and play with Go packages:

Building the simplest Go static analysis tool | CloudFlare Blog (archive)

Make sure to read Alan Donovan's comment, too, to learn about two interesting related libraries.