What are the best tools for hardening OSS against supply chain attacks?

https://www.npmjs.com/package/audit-ci is nice, sharing more as I search

Building open source via @frames, /open-frames to help Farcaster and decentralized social win. a16z CSX23. Side proj: farcasterchannels.com farcaster.id @search

Blockchain & Development Nerd 🤓 build, develop and operate Farcaster solutions @ dtech.vision also love tech, decentralization, fitness and oldschool rap 😎

https://owasp.org/www-community/Free_for_Open_Source_Application_Security_Tools