Dev Tools · via X
OpenCode's release process shows how hard supply-chain safety is
Shipping a CLI and desktop app to npm, brew, winget and AUR across three channels, with signing on Mac and Windows, takes days to secure. Small dev-tool teams face the same attack surface as big ones.