Taking Control Of Software Supply Chains in the Open Source Era

Understanding how these recent npm attacks  unfolded will help signal a way forward for a more secure software supply chain.