Supply chain security for Go, Part 2: Compromised dependencies | Heykuki News