Software supply chain Supply chain Breaking trust: Shades of crisis across an insecure software supply chain dataset