bureado / they-probably-didnt-backdoor-this-either

Learning in public about supply-chain security of community open source projects