yeah, this is a pretty big deal in terms of open source supply chain in terms of the scope of projects impacted. can you also link this in the thread in #748936364283920495?