Add advisories for Mitchell Hashimoto's libraries

As per https://gist.github.com/mitchellh/90029601268e59a29e64e55bab1c5bdc, we should flag this to users of his libraries.

Right now there are only a couple of "blessed forks", so we can note them here.

---

Will be followed-up by #10