A compilation of resources in the software supply chain security domain, with emphasis on open source - bureado/awesome-software-supply-chain-security ...