We're checking old deps (requires, provides, conflicts, obsoletes), but shouldn't we extend it also for new types of deps (maybe another check for buildrequires in srpms)?
This issue has been migrated to Fedora Forge: https://forge.fedoraproject.org/koji/koji/issues/984
Please continue any further discussion there.