Supply chain attacks: is a Kessler Syndrome for OSS a risk worth acknowledging? (keydiscussions.com)

The odds of the OSS ecosystem existing in a permanent state of compromise have risen dramatically this year. (still not close, but the explosion in supply chain attacks is concerning)