The Alpha and Omega of software supply chain security

The Alpha-Omega Project will improve open-source software's security. While it's a good start, it may not be enough.