Product engineering teams must own supply chain risk | Hacker News Reader