https://seguridadpy.info/2023/01/thesecurityledgerepisode-githubs-jill-mon%c3%a9corallo-on-product-security-and-supply-chain-threats/