“I think of that as a best practice as well and I'll even genericize it a little bit more and say Proxy, a third party dependency proxy is the capability.”

Transcript evidence from Kyle Kelly -- The Dumpster Fire of Software Supply Chain Security.