OSS Supply-chain Security: What Will It Take? - Maya Kaczorowski; Falcon Momot; George V. Neville-Neil; Chris McCubbin (ACM Queue, 2022)