Evaluating Software Supply Chain Security in Research Software. - Richard Hegewald; Rebecca Beyer (CoRR, 2025)