Dissecting the implications of OSS Rebuild, a new initiative to counter supply chain attacks in open source software.