SoK: Analysis of Software Supply Chain Security by Establishing Secure Design Properties.

Date: