Supply chain security shouldn't depend on up-votes
twitter.com