Software Supply Chain and Geopolitics: KYM (Know Your Maintainers)
vulnerability.blog