> Five supply chain attacks in twelve days.

Open source is fine, but the npm-like model must be improved.

LLM article written by a company selling “Secure-by-default open source software”