Data shows public AI repos may be quietly becoming a supply chain risk | Hacker News Reader