I think google is suffering big company problems. I think a lot of googlers want to penalise malicious sites but it's a second tier goal for the search team, wh

I think google is suffering big company problems. I think a lot of googlers want to penalise malicious sites but it's a second tier goal for the search team, who are getting hammered constantly by other players trying to alter rankings. Obviously a few open source projects complaining won't move the needle much, but law enforcement and cyber agencies do have big requirements for improving resilience to these attacks (and supply chain especially). Improving the consumer supply chain security is a big government goal in many countries.