Possiable supply chain attack

[greensea]

I found a repo at https://github.com/siruspen/logrus. The repo have very similar name.

For now this repo does nothing evil, but imagine the sitiation:

1. Bob want to import github.com/sirupsen/logrus (this repo), but he made an typo, he just import github.com/siruspen/logrus (the forked repo).
2. Currently this two repo doing almost the same thing, so Bob didn't notice he just import the different repo.
3. The forked repo add some evil code
4. Bob do go get -u to do vender version upgrade
5. Bob get evil code into his projecat

I strongly add WARNING or NOTICE in README.md, warn people there is a similar repo, keep an eye when import logrus.

I just found most of my project imported the forked repo, what a bad day to me.

[github-actions]

This issue is stale because it has been open for 30 days with no activity.

[github-actions]

This issue was closed because it has been inactive for 14 days since being marked as stale.