Submit an issue or bug with reproduction steps in the issue tag
Tests must still pass or have good explanation for change. Only additions to the tests and improvements to test coverage are encouraged.
go get or go install puts sqlvet in $GOPATH or $HOME/go. You're able to fork and the repo into another directory to make changes. go test ./... works pretty well for testing changes.
The const version needs to be updated with changes before new releases are tagged and published.
Please go directly to the repository owner with information on a vulnerability or it's fix so it can be patched and released asap.