Building an open source chain of trust: new research uncovers key blockers
canonical.com