mitchellh has moved on from Go development and has archived his repos (list here). In addition to that gox has been archived. Helm uses gox and some dependencies including:

• github.com/mitchellh/gox
• github.com/mitchellh/go-wordwrap
• github.com/mitchellh/reflectwalk
• chore: replace github.com/mitchellh/copystructure #31342

We need to handle these to ensure we are using projects that being maintained (e.g., there is no way a CVE could be reported to any of these).