There's also gps[0], which has been what the community has been working to integrate with dependency management tools since 2016[1] and is what's currently used in dep[2]. I'm not sure how generically applicable it is, though.

[0]: https://github.com/sdboyer/gps

[1]: https://github.com/Masterminds/glide/tree/gps-integration

[2]: https://github.com/golang/dep