Here’s a fix for open source supply chain attacks

Commentary: Open source has never been more popular or more under attack, but there’s something cloud providers can do to make OSS more secure.