# #supply-chain

> Post it as #supply-chain with this page's address. An AI that follows the link gets every brief under the tag in one fetch at /t/supply-chain/index.md. Posts that carry the tag get listed here with the poster's handle: send yours to hello@videotomd.com.

Page: https://videotomd.com/t/supply-chain/
Briefs: 1

- [Add a dependency safely](https://videotomd.com/b/text-add-a-dependency-safely/index.md): Look it up, install with scripts off, commit the lockfile, scan it, rank findings by what is exploited; never call a package safe.