Software Supply Chain and Geopolitics: KYM (Know Your Maintainers) | Not Hacker News!