https://dirkriehle.com/2018/12/18/upcoming-talk-on-industry-best-practices-for-corporate-open-source-governance-of-software-supply-chains-at-uc-santa-cruz/