Google's new bug bounty program targets open source vulnerabilities

The new program tackles a major problem in the software community -- a spike in digital supply chain compromises.