https://www.humansecurity.com/learn/blog/5-risks-of-client-side-supply-chain-code