Supply chain security focuses on risks introduced through external dependencies and tooling.

• vulnerable libraries
• malicious packages
• abandoned dependencies
• compromised build systems

Reproducible versions reduce unexpected behavior.

Understanding where software originates from improves traceability.

Dependencies should be updated regularly but carefully validated.

• Dependency Management