<p>All this talk about <a href="https://fosstodon.org/tags/xzorcist" class="mention hashtag" rel="tag">#<span>xzorcist</span></a> over the weekend, I want to also point out that it's important to remember that the "software supply chain" largely does *not* exist in regards to open source, because most people have no real relationship other than parasitic consumption with the project.</p><p><span class="h-card" translate="no"><a href="https://hachyderm.io/@Di4na" class="u-url mention">@<span>Di4na</span></a></span>'s great blog post on this topic explains it quite well: <a href="https://www.softwaremaxims.com/blog/not-a-supplier" target="_blank" rel="nofollow noopener noreferrer" translate="no"><span class="invisible">https://www.</span><span class="ellipsis">softwaremaxims.com/blog/not-a-</span><span class="invisible">supplier</span></a></p>
