https://www.pflumm.de/revenera-statusreport-2022-software-supply-chain-open-source-software-oss/