@mupuf idk what was the reasoning of those who decided Debian's policy on packaging golang packages.
I see the appeal of not having 10 different versions of a popular library in your system, even if it's statically linked.
But from a pragmatic point of view, I would just run `go vendor` and treat source code of all the deps as source code of the end-package.