1 comment

[ 3.0 ms ] story [ 9.7 ms ] thread
After seeing the xz backdoor I thought we needed better visibility into our dependency trees.