[overcyn]

User's wouldn't be able to depend on version v1.0.0 if it doesn't exist. From what I understand the tool isn't downloading the list of all versions from GitHub and selecting the minimum. Its searching for the maximum version number (i.e. minimal required version), from your go.mod file and all your dependencies' go.mod file.

[mCOLlSVIxp6c]

I think you're correct. So my nasty little hack wouldn't work. That's probably a good thing.