`govulncheck` reports error

[wkwi2r]

The following message appeared when I ran govulncheck:

internal error: package "golang.org/x/sync/semaphore" without types was imported from "github.com/jackc/puddle/v2"

[jackc]

I think that is a govulncheck bug. It's not reporting a vulnerability, it's crashing.