Google’s Andrew Pollock and Addressing Open Source Vulnerabilities

od What's in the SOSS? An OpenSSF Podcast