We cannot guarantee the security of https://www.microsoft.com/security/blog/2022/09/29/zinc-weaponizing-open-source-software/