Read direct dependencies from `go.mod`

[devblac]

Read direct dependencies from go.mod

Context

-unused reported transitive modules I never required. The tool is pulling dependencies from compiled imports instead of the go.mod direct requirements.
 

Problem

getDirectDependencies walks pkg.Imports, which includes transitive deps. That makes unused-dependency reports noisy and misleading.
 

Expected behavior

Only modules listed as direct require entries in go.mod should be considered direct dependencies for the unused check.
 

Scope / non-goals

• Keep deduplication and existing analyzer flow.
• No broader dependency graph changes.
   

Acceptance criteria

• Direct-dependency list matches require entries in go.mod; transitive-only modules are excluded.
• Unit test with a sample go.mod verifies indirect entries are ignored.
• No other analyzer behaviors change.
   

Hints

• internal/analyzer — getDirectDependencies; consider golang.org/x/mod/modfile.