https://epgn.ch/2022/05/17/google-will-start-distributing-a-security-vetted-collection-of-open-source-software-libraries/