[pkg-go] Security support for packages written in Go

[Florian Weimer]

* Dmitry Smirnov:

> On Friday, 8 July 2016 8:53:20 AM AEST Florian Weimer wrote:
>> Part of the problem is that we currently lack a decent way to list all
>> these reverse dependencies.
>
> We can get list of all source packages to re-build from reverse build 
> dependencies. Then it should be possible to filter arch:any packages to bin-
> NMU.
>
> Alternatively Built-Using field could be of help.

We already discussed why this doesn't work with the present state of
the metadata.