yeah, it's just the beggining of this, you will see supply chain attacks will increase more than 100% just in 2022, in short whole internet is at risk, it's time to think carefully and immediately start using services like Vulert( https://bit.ly/336DZub ) that tracks your open-source softwares for free and notifies you in real-time if any seccurity issue is found within your applciation. it's free. Let me know what's…
The risk with relying on notifications is that it's retroactive and you are already exposed. Instead of attempting to stop threats before they enter your supply chain.
yeah agree, but with the help of real time notification you can move really quickly i think.