@bcmills requested issue #51324 to be considered for backport to the next 1.17 minor release.
@gopherbot, please backport to Go 1.16 and Go 1.17. This is a regression introduced in a security release (for #35671), and can cause confusion if a Go user accidentally passes the wrong module path to go get.