A pretty interesting article loosely related to the #xz mess and it's cleanup process.
Reproducible builds, verifiable build chains. Lot of good stuff.

https://research.swtch.com/nih