Security GitHub Dependabot is a 'noise machine', and should be turned off, says Go library maintainer