Software Supply Chain and Geopolitics: KYM (Know Your Maintainers) · HackerTrans