Securing the open source supply chain across GitHub | Hacker News Reader