With the rise in supply chain attacks, Microsoft is working with our ecosystem partners to track packages back to their public sources. See GitHub Microsoft organization for more information.