That’s interesting… I hadn’t equated the rise of supply chain vulnerabilities with a decline in interest in package management… That said I’m in a role that hasn’t gone hog to the wall for AI vibe coded slop so… that might be why. I wonder what the future for security scanners looks like when they can no longer just flag individual packages