Lassoing dangerously insecure software supply chains with , by @dpp gitlab.com/spicelabs1/goatrode