@CSDUMMI as mentioned in chat, on Hacker News I bumped into a discussion about Microsoft open-sourcing a Software Bill of Materials (SBOM) project. Didn’t know what a SBOM meant, but it looks to be interesting for this project. I documented here. There are existing tools that can do the dependency analysis that this idea needs.