Supply Chain Security Is Fubar – A Proposal for GitHub