The best free, open-source supply-chain security tool? The lockfile | Dark Hacker News