https://shenxianpeng.github.io/en/posts/supply-chain-security/