2609.08810R·cs.CR22 de set. de 2026Measuring the Security of the Evolving Software Supply Chain: a Research Agenda Sarah Meriem Ourari