Here’s a common scenario. An enterprise needs a software solution. They shop around and discover that buying a tool will cost them $300,000 per year. “Hey,” leadership says, “I have a bright idea.

SolarWinds became the poster child for attacks on software supply chains last year when a group of threat actors injected malicious code known as Sunburst into the company’s software development ...