vulncheck requires Go versions to detected vulnerabilities in standard libraries. If the Go version is devel or in general does not parse into semver, we should at least warn the user that stdlib vulnerabilities might not be detected.
cc @jba @julieqiu