the maintainer clearly doesn't want to engage with my long writeup :neofox_woozy: first they misunderstood it as complaining about an old version and closed the issue; now they're saying distros should not use go mod vendor + go build -mod=vendor