Trail of Bits is not a no-name company. They’ve since gone on to work on the PyPi warehouse codebase to contribute a lot of the supply chain security stuff (Trusted Publishing for one).