Really good! Sent this to my colleagues to raise awareness on third party package security risks.