"do you actually protect yourself from supply chain attacks or do you just hope that you do?" @JMMatchett speaks with the team at Open Source Security on the rise in dependency attacks opensourcesecurity.io/2026/2026-10-j…