Extend Trust Across the Software Supply Chain with Red Hat Trusted Libraries

Apologies if it sounds like promotional material, but the topic is something that has been discussed also here a lot. I also predicted a while back that vetting, curation, trust chains, and alike will be coming.