2025-09-23 rust security claude-code Rust supply chain auditor Using claude code to deny adding new dependency with supply chain risk