I think a lot of the challenges around #oss in the #dotnet community exist because both MS and OSS have enabled businesses, and to an extent individual developers, to avoid considering the full costs of their supply chain. It came from a good place, but needs fixing. 1/ The software packages and libraries you depend on are part of a supply chain for whatever you're delivering.

As in, they're something you didn't have to build yourself, and without them, you'd have to write a bunch of code that would have its own costs. 2/