go subcommand should ensure that all dependencies are pinned about godep

[kr]

One piece to the solution for this:

The godep go get command should always have the same effect
as godep go install. The only case where they're different is
if some dependencies are missing from the Godeps list. So I'm
planning to make godep go get an error.

[kr]

The godep go get part was done in 05aebf2.

[kr]

The remaining part of this is to check that there are no
dependencies missing from the Godeps list.

[kelseyhightower]

@kr Is this still a desired feature? Are the plans to add a check on missing dependencies from the Godeps list? I would not mind take a stab at this.

[kr]

Yes, this is still desired!

Ideally we can move toward rewriting import paths, which would make the 'godep go' command superfluous. However, even then I think we'd want a way to check that everything is correct, that:

1. all dependencies are listed
2. the code that exists in Godeps/_workspace matches exactly the listed commit

The diff command described in issue #1 would cover at least the first item above, and maybe it could do the second item as well, perhaps under a flag.

[freeformz]

I'm going to close this as it's pretty broad and I think a little outdated. As these things come up again (if they do) I'll open new issues/PRs.