There is no secure software supply-chain | Hacker News Reader