Popular Go Library fsnotify Sparks Supply Chain Security Concerns