https://flnug.com/tech/estrella/article/sonatype-state-software-supply-chain-security/