The JavaScript supply chain includes numerous vulnerabilities due to its expansive nature and the long dependency chains. Socket is a new security company that can protect your most critical apps from supply chain attacks. They are taking an entirely new approach to one of the hardest problems in security in a stagnant part of the
https://softwareengineeringdaily.com/2022/04/22/javascript-supply-chain-with-feross-aboukhadijeh/