With the rise in supply chain attacks, Microsoft is working with our ecosystem partners to track packages back to their public sources. See Secure-Supply-chain repository in the GitHub Microsoft organization for more information.