Securing the open source supply chain across GitHub — Blankdot