Seems a bit harsh.

The BOM of Golang, which you know, is easily found:

https://github.com/Dominic-Wassef/ghostly/blob/main/go.mod https://github.com/Dominic-Wassef/ghostly/blob/main/go.sum

I suspect most library authors who are happy with others using their work, are probably somewhat okay with the standard file pointing to their original work as attribution.

It's also a bit more than 100 glue code.

Last paragraph is a good though. :)