1 comment

[ 3.5 ms ] story [ 13.7 ms ] thread
After seeing the xz backdoor I thought we needed better visibility into our dependency trees.