nice of them to invest that much money in nix wow

That's a funny comment but it's also really painful to read

FYI people involved in the Supply Chain Security part of the CNCF Security TAG and the SLSA framework are actually trying multiple times to reach out to the nix community in Discorse and Matrix but it gets f*ck all traction
One person showed interest and joined the channel to discuss SLSA and where nix as-is destroys requirements and pain points with ease

Jean-Paul in both the Dev and Security channels was asking if it was a good idea to put nixpkgs forward for a potential pro-bono security audit at their employer and again f*ck all interest

Then later on we start wondering, where's the funding, where's the adoption? Why is there a massive wave of interest in Supply Chain but they're building from scratch? Why aren't they learning off the OVER 10 years of work around nix/nixpkgs