Castles Built on Sand: Towards Securing the Open-Source Software Ecosystem

Not sure this has been shared yet! Interesting resource.