Phew! It took me a while to figure out the entire process so I decided to write this post and I hope it'll further help everyone else get started. ...
For further actions, you may consider blocking this person and/or reporting abuse
This assumes go modules aren't used, and I'm not sure that will be possible in Go 1.13 as they want to deprecate GOPATH. I don't see any problem with forking and cloning, but if I'm missing something then please let me know the pitfalls of doing that.
go get -uin module mode will actually update all packages, whether you supply a package URL or not.There is talk about this tool which may be helpful, although I've never looked into it:
github.com/rogpeppe/gohack