All your requirements could equally well fulfilled by PHP:
- easy distribution (like "go install"): composer install works the same way.
- minimal dependencies, tests and thus stability and security (like go ecosystem): the packagist/PHP ecosystem is of very high quality in general, packages tend to have few dependencies, and have solid test coverage.
- source code proxies by Google, checksums, and prevention of attacks (thanks to security of go ecosystem): Packagist might not be served directly by Google, but the entire infrastructure is built around GitHub, where published artifacts map to the source files on GitHub 1:1; so you can trust on Git refs as checksums.
That was not what the parent post required, is also besides the point, and I wouldn’t recommend it. Go is a fine language, especially for standalone applications.
But downright dismissing PHP as obviously worse than Go doesn’t do another very fine language justice. PHP is capable of quite a lot really, is fast as heck, has an amazing ecosystem, and carries you all the way from quick prototype to stable production workload.
And yes: a tool to migrate a blog is something it effortlessly handles.
