Polyfill.io claims reveal new cracks in supply chain, but how deep do they go?

An opinion column examines the alleged Polyfill.io supply-chain issue—where ownership changes purportedly led to malicious JavaScript being served to many sites—and the broader risks of relying on third-party, dynamically hosted code; it notes Cloudflare’s redirection response, legal and operational complexities, and urges developers to reassess dependency risk and accountability in mitigating such threats.