A compilation of resources in the software supply chain security domain, with emphasis on open source - View it on GitHub