Build-time sponsorship verification for OSS libraries installed via NuGet | Hacker News Reader