Maintainers of open source developer tools will need to work doubly hard to ensure that they maintain software supply security.