Supply-chain attacks aren't really a property of the dependency management system

Not having a dependency management system isn't a solution to supply chain attacks, auditing your dependencies is

Ironically the same argument applies

The gang learns what an oligopoly is

And in tank warfare this is called spalling

A projectile hits the armor and doesn't penetrate it, but the armor inside still fragments and injured the operators

Agreed. There's also getting a hexadollar from Donald Knuth for finding errors in The Art of Computer Programming

I've never done either, so I'm not bragging or anything