Posts tagged with “supply-chain”

A High-weight Scorecard check gives 10/10 to a repo nobody reviewed. Four of five paths never look at who approved anything.

Twenty-two thousand MCP servers. Zero mandatory security checks. The protocol won — the trust layer never shipped. An audit of what's actually exposed.