Here's a fix for open source supply chain attacks

Commentary: Open up resource has in no way been a lot more popular or much more below attack, but there’s a little something cloud providers can do to make OSS far more safe.