easyjson has been identified as a supply chain security risk for US and EU companies https://huntedlabs.com/the-russian-open-source-project-that-we-cant-live-without/ https://www.wired.com/story/easyjson-open-source-vk-ties/ Could you please replace it with another package