There's also ongoing work to build a dependency vulnerability database. This is proposed to be surfaced via a built in `go audit` command. https://go.googlesou

There's also ongoing work to build a dependency vulnerability database. This is proposed to be surfaced via a built in `go audit` command. https://go.googlesource.com/proposal/+/master/design/draft-vulndb.md https://go.googlesource.com/proposal/+/master/design/draft-v...