Open source software has its perks, but supply chain risks can't be ignored