How To Thoroughly Monitor And Protect Software Supply Chains