Open Infrastructure Is Not Free, Part II: The Hidden Cost of Running Package Registries Blog AI Linux Foundation Open Source Sustainability Package Registries Software Supply Chain Security