https://dirkriehle.com/2020/06/04/managing-your-open-source-supply-chain-why-and-how-nikolay-harutyunyan-ieee-computer-column/