open source supply chain