Software supply chain attacks are a practical risk for any organisation that builds, buys, or runs software. The issue is not limited to open source packages. It also includes source control, build ...