Comment by 01HNNWZ0MV43FF

What part of C package management defends against supply chain attacks?

Does it audit third-party code for you?