Software supply-chain attacks and mitigations –Sindhuja Mahendran