Comment by newaccount2023

supply chain will have to be some kind of federated and distributed mechanism

there is absolutely no way a single startup can hope to be the single source of truth, that is a recipe for disaster just like we are now seeing with hub.docker.com