The Fundamental Law Of Software Dependencies
The article argues that canonical source code should include checksums for every dependency, including transitive libraries and the compiler, so builds become reproducible and trust shifts from distributors to hashes.