Please depend on go4org/go4, not (ancient) fork of juju/go4 #34
Description
Currently this project depends on an ancient (no changes in ~5.5 years) version of juju/go4, which was forked from go4org/go4. The upstream is actively maintained, and a snapshot is already packaged for Debian. I know the readme claims no API stability, but it looks like persistent-cookiejar only makes use of the lock component, and that looks pretty stable.
Please consider switching to use go4org/go4 rather than juju/go4.
(This was noticed while reviewing dependencies needed to cleanly package LXD for Debian.)