Google on Wednesday announced the0.1 Beta versionofGUAC(short for Graph for Understanding Artifact Composition) for organizations to secure their software supply chains. To that end, the search giant ismaking availablethe open source framework as an API for developers to integrate their own tools and policy engines. GUACaims to aggregate software security metadata from different sources