ZDNet : Open-source security: It’s too easy to upload ‘devastating’ malicious packages, warns Google May 3, 2022 | Alpha-Omega
OpenSSF: OpenSSF Selects Node.js as Initial Project to Improve Supply Chain Security April 18, 2022 | Alpha-Omega
