GitHub improves supply chain security, EFF takes on U.S. Treasury Department & more: Open Source Matters