The best free, open-source supply-chain security tool? The lockfile | Hacker News Reader