Assuming the following directory structure under GOPATH
:
src/
github.com/golang/glog/
myapp/
myapp.go // imports glog and mylib
vendor/
github.com/golang/glog/
mylib/
mylib.go // imports glog
Then my reading of https://golang.org/s/go15vendor indicates that both myapp and mylib will get built with the version of glog inside the vendor folder and neither will use the other copy of glog outside the myapp tree.
If there was another vendor folder inside the vendored copy of mylib, that will cause problems like you are worried about.