I've been in touch with folks from the Open Source Security Foundation [0] who is interested in making this a centralized service. I'm a big believer that func

I've been in touch with folks from the Open Source Security Foundation [0] who is interested in making this a centralized service. I'm a big believer that functions like this should be centralized under a foundation like that, and have really close connections to package manager maintainers so that we can work together towards solving the problem. [0] https://openssf.org/ https://openssf.org/