Securing open-source code supply chains may help prevent the next big cyberattack