Lesson 2 - Security: Secure as you build

Two supply-chain compromises landed in my dependency tree in one week, days before I meant to call the build done. I froze. Here is what I did next, and why AI-era security can't wait for a tidy milestone.

Raccontata dadev.to