https://hacken.io/discover/securing-the-supply-chain/