The odds of the OSS ecosystem existing in a permanent state of compromise have risen dramatically this year. (still not close, but the explosion in supply chain attacks is concerning)