dependency auditing The 'shadow-dependency' audit: 7 stress-tests for your production codebase against transient open-source supply chain poisoning Wednesday, June 24, 2026 M. Mohiuddin