Reading up on Sonatype

The article argues that open-source security now relies on accidental human vigilance rather than automated defenses, as AI agents increasingly exploit unmaintained projects and supply chains.