Flag when vendor folder does not match go.mod and go.sum #2
Description
Some projects may elect to commit the vendor folder to avoid requiring network access to compile a project. This VSaur check will verify the vendor folder matches the hash recorded in go.sum, and this correlates with a version listed in go.mod.