Secure software supply chain: why every link matters | Hacker News Reader