Open Source Maintainers Add Signed Checkpoints to Stop Supply Chain Attacks Blog November 12, 2026 Modern software is built from thousands of shared open source components, and attackers have learned that compromising one widely used library can.