More of a de facto standard for supply chain attacks tbh