Software supply chain: A taxonomy of attacks, mitigations and risk assessment strategies. - Gokkaya, Betul; Aniello, Leonardo; Halak, Basel (Journal of Information Security & Applications, 2026)