Open source "died" in March. It just doesn't know it yet (chainguard.dev)

LLM article written by a company selling “Secure-by-default open source software”

> Five supply chain attacks in twelve days.

Open source is fine, but the npm-like model must be improved.