Libros — software supply chain security