A comprehensive, systematic and actionable way to understand attacker behaviors and techniques with respect to the software supply chain - View it on GitHub