Supply-chain attacks on open source software are getting out of hand

5 points | by akyuu a day ago