All this talk about #xzorcist over the weekend, I want to also point out that it's important to remember that the "software supply chain" largely does *not* exist in regards to open source, because most people have no real relationship other than parasitic consumption with the project.
@Di4na's great blog post on this topic explains it quite well: https://www.softwaremaxims.com/blog/not-a-supplier
@Conan_Kudo @Di4na
"You are not buying from a supplier; you are a raccoon digging through dumpsters for free code."
@Conan_Kudo
@Di4na
That was a great read. Thanks for the link.
@Conan_Kudo @Di4na That "I am not a supplier" blog post is spot on!