Securing the supply chain scale: Starting with 71 important open source projects