Abstract: Cyberattacks that rely on the software supply chain as their attack vector are becoming more frequent and effective. Attacks such as SolarWinds, NotPetya, and XcodeGhost have demonstrated ...