Glossary term
What is supply chain (Software supply chain)?
supply chain stands for Software supply chain.
Everything in your software that you did not write: packages, build tools, CI actions, and the accounts and servers that publish them.
Learn it properly · Security for DevelopersLesson 6: Dependencies and the Supply Chain: npm, Lockfiles and GitHub ActionsHow a package you did not write can hurt you: typosquatting, install scripts, malicious updates. Lockfiles, npm audit, Dependabot, secret scanning and securing your CI.