i'm afraid i still can't get over blowhards saying "supply chain security" when they really mean "we built a capitalist enterprise on top of a pile of donated work from idealistic hackers, and now we're mad that they didn't have the same goals and process as our paid employees."
literally fuck off with that. people writing code for their friends is not your "supply chain", it's just an extremely bad business model for lazy people.