Supply chain security for Go, Part 2: Compromised dependencies | Hacker News Reader