https://www.dailydishnews.org.uk/post/securing-the-open-source-supply-chain-across-github-ddxf47