dependency-trust

Your build trusts whatever it can find

A build system executed code because a name resolved, not because content was verified. How trust attaches to the reference and outlives the artifact.