YOUR DEPENDENCIES ARE SOMEONE ELSE'S ATTACK SURFACE

Summary from the TLDR newsletter

Supply-chain attacks are becoming more common as some dependencies don't have the resources to ensure security.