Remind Supply Chain Risks: I am a security researcher, the purpose is to make everyone pay attention to software supply chain attacks, because the risks are too great.
The Tidelift Subscription provides access to a continuously curated stream of human-researched and maintainer-verified data on open source packages and their licenses, releases, vulnerabilities, and development practices.