Update deps finds invalid go modules

[cardil]

205 introduce the foreach to find multiple go.mod files. This doesn't work well, as the vendor and third_party dirs needs to be excluded.

Also, the go_mod_module_name function reports invalid module names.