Cybersecurity briefing — 2026-07-12

A poisoned build dependency is not a dependency incident.