GoSurf: Identifying Software Supply Chain Attack Vectors in Go

Re-assign community