You want to reply to this toot:
NPM with a reminder about why software supply chain matters: https://github.com/dominictarr/event-stream/issues/116 and ICYMI, I posted some thoughts on the digital supply chain about two weeks ago: #infosec #reproduciblebuilds https://puri.sm/posts/protecting-the-digital-supply-chain/