Google assuring open source code to secure software dependencies

Also see Google's press release "Shared success in building a safer open source community" from a few days ago: https://blog.google/technology/safety-security/shared-succes...