--- title: Supplier Security Questionnaire | daily.dev description: A satirical fictional supplier security questionnaire imagines an absurd corporate risk-assessment form sent to an open source maintainer, based on the package... canonical: https://daily.dev/posts/supplier-security-questionnaire-t8qyiv0gl twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Supplier Security Questionnaire | daily.dev og:description: A satirical fictional supplier security questionnaire imagines an absurd corporate risk-assessment form sent to an open source maintainer, based on the package... og:url: https://daily.dev/posts/supplier-security-questionnaire-t8qyiv0gl og:image: https://api.daily.dev/og/posts/T8qYIV0gl.png og:image:alt: Supplier Security Questionnaire og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Supplier Security Questionnaire **[Andrew Nesbitt](https://daily.dev/sources/nesbitt-io)** · 8 min read · 0 upvotes · 0 comments ## Summary A satirical fictional supplier security questionnaire imagines an absurd corporate risk-assessment form sent to an open source maintainer, based on the package manifest's contact address. It parodies real third-party risk practices by escalating each section into absurdity: demanding SOC 2 certificates and background checks from unpaid solo maintainers, life insurance policies on key contributors, residential addresses for legal service, AI training data consent, and 180 days' notice before any licence change, all while noting that non-response is treated as a failing score. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Now Hiring: Senior Open Source Maintainer](https://daily.dev/posts/now-hiring-senior-open-source-maintainer-js3oivfge) · Andrew Nesbitt · 0 upvotes · 0 comments - [13 cyber questions to better vet IT vendors and reduce third-party risk](https://daily.dev/posts/13-cyber-questions-to-better-vet-it-vendors-and-reduce-third-party-risk-zelhrnhdj) · CSO Online · 0 upvotes · 0 comments - [help wanted](https://daily.dev/posts/help-wanted-uysoj4h1e) · Lobsters · 1 upvotes · 0 comments - [The practical supply chain attacks checklist](https://daily.dev/posts/the-practical-supply-chain-attacks-checklist-8czahxxlu) · Aikido Security · 1 upvotes · 0 comments - [Kaspersky on how to secure a supply chain you do not control](https://daily.dev/posts/kaspersky-on-how-to-secure-a-supply-chain-you-do-not-control-myfjgjeyg) · TechCentral · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#open-source](https://daily.dev/tags/open-source) [View this post on daily.dev](https://daily.dev/posts/supplier-security-questionnaire-t8qyiv0gl) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Supplier Security Questionnaire","url":"https://daily.dev/posts/supplier-security-questionnaire-t8qyiv0gl","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/supplier-security-questionnaire-t8qyiv0gl"},"datePublished":"2026-08-13T17:12:00.765Z","dateModified":"2026-08-13T17:12:21.387Z","description":"A satirical fictional supplier security questionnaire imagines an absurd corporate risk-assessment form sent to an open source maintainer, based on the package...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/416572ca2b211e96c4c4b92af22d1ec7?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/416572ca2b211e96c4c4b92af22d1ec7?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Andrew Nesbitt","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Andrew Nesbitt","logo":"https://media.daily.dev/image/upload/logos/placeholder.jpg","url":"https://daily.dev/sources/nesbitt-io"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/supplier-security-questionnaire-t8qyiv0gl","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,open-source","timeRequired":"PT8M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Andrew Nesbitt","item":"https://daily.dev/sources/nesbitt-io"},{"@type":"ListItem","position":3,"name":"Supplier Security Questionnaire"}]} ```