Sonatype: Impact of software supply chain practices - View it on GitHub