<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Supply Chain on Vonng</title><link>https://vonng.com/en/tags/supply-chain/</link><description>Recent content in Supply Chain on Vonng</description><generator>Hugo -- gohugo.io</generator><language>en</language><managingEditor>rh@vonng.com (Ruohang Feng)</managingEditor><webMaster>rh@vonng.com (Ruohang Feng)</webMaster><copyright>© 2025 Ruohang Feng</copyright><lastBuildDate>Sat, 22 Nov 2025 00:00:00 +0000</lastBuildDate><atom:link href="https://vonng.com/en/tags/supply-chain/index.xml" rel="self" type="application/rss+xml"/><item><title>On Trusting Open-Source Supply Chains</title><link>https://vonng.com/en/db/tuna-mirror-site/</link><pubDate>Sat, 22 Nov 2025 00:00:00 +0000</pubDate><author>rh@vonng.com (Ruohang Feng)</author><guid>https://vonng.com/en/db/tuna-mirror-site/</guid><description>In serious production you can’t rely on an upstream that explicitly says “no guarantees.” When someone says “don’t count on me,” the right answer is “then I’ll run it myself.”</description><media:content xmlns:media="http://search.yahoo.com/mrss/" url="https://vonng.com/db/tuna-mirror-site/featured.jpg"/></item></channel></rss>