version under .gopack/vendor to avoid collisions with legal package names
index dependencies by import path
data structures for tracking import use across go source
dependency analysis and fail when remote imports in source are not managed in gopack or gopack dependencies are not referenced in source