It's scary how much of the software supply chain we assume is safe. We pull stuff off of GitHub, Docker Hub, npm all the time simply trusting the author isn't u

It's scary how much of the software supply chain we assume is safe. We pull stuff off of GitHub, Docker Hub, npm all the time simply trusting the author isn't up to no good and that the source hasn't been compromised.