[firesteelrain]

I can see how the article seemed like an advertisement for Hunted Labs. I have talked to them and it’s a good product especially if you care about where you are getting your software from as part of a supply chain analysis.

[pabs3]

It seemed like an advertisement for the incompetence of Hunted Labs to me, from them:

> "This serves as another powerful reminder that knowing who writes your code is just as critical as understanding what the code does"

If who wrote some code matters to you, then your supply chain management is simply insufficient.

[firesteelrain]

> If who wrote some code matters to you, then your supply chain management is simply insufficient.

I am not following. Source country is absolutely a thing when certain industries look at open source. That’s what Hunted Labs does

[pabs3]

Its completely irrelevant if you are doing things properly.

[firesteelrain]

Can you elaborate?

[pabs3]

The whole article is refuting their point.