Open-Source Supply Chain Security: Addressing a Key Challenge
By Robert Bruce, Deputy CTO
In January 2022, the developer behind two immensely popular open-source NPM packages — “colors” and “faker” — intentionally disrupted them, citing overwhelming workload. The ripple effects were felt far and wide, causing thousands of projects…