Popular Go Library fsnotify Sparks Supply Chain Security Concerns

A dispute over maintainer access and an uncoordinated change to the sponsorship file in the popular fsnotify Go library caused temporary supply-chain alarm across downstream ecosystems; despite panic and increased scrutiny from projects like Kubernetes and Docker, research found no evidence of malicious code or compromised releases, framing the event as a governance and trust issue rather than an active security breach.