Securing the Open Source Software Supply