More development organizations are building and leveraging ML/AI models for use in software applications. However, a lack of standardized best practices on how to incorporate MLOps into the broader software supply chain has led ML model development to largely occur in isolation from the rest of software development. Further, the use of open source models poses similar challenges to using OSS packages – security, availability, versioning, etc. – particularly as the open source model ecosystem is still relatively new and the threat landscape uncertain.