fsnotify Maintainer Access Change Sparks Supply Chain Security Concerns

A dispute over maintainer access in the widely used Go library fsnotify prompted supply-chain concern after contributors were removed from the GitHub organization and new releases followed a long dormant period. Although maintainers say the removals were governance and quality-control actions and no compromise has been detected, the episode raised downstream alarm (Kubernetes, forks) and underscores the need for transparent governance and release practices for critical open-source dependencies.