[bavarianbob]

I've worked in software supply chain security for two years now and this is an extremely optimistic take. Nearly all organizations are not even remotely close to this level of responsiveness.

[naugtur]

Again, that's why LavaMoat exists. Set it up once and it will block many classes of attacks regardless of where they come from.