https://orbitbrain.com/blog/us-gov-issues-supply-chain-security-guidance-for-software-suppliers/