✧✦✶✷Catherine✷✶✦✧ on Nostr: repeat after me: open source packages are not my supply chain unless i have a ...repeat after me: open source packages are not my supply chain unless i have a contract with their maintainer