Project should consider whether it can switch to using https://github.com/go-yaml/yaml (from which github.com/coreos/yaml was forked), since go-yaml/yaml has relicensed to the more permissive license option Apache-2.0 AND MIT. Note that coreos/yaml was archived and unmaintained as of 2021.