securityaffairs.com
GUAC - A Google Open Source Project to secure software supply chain
Google launched the Graph for the Understanding Artifact Composition (GUAC) project, to secure the software supply chain.
Pierluigi Paganini