A Data Engineering Method for Filtering and Identifying Open Source Software Supply Chain

Filtering and identifying open source supply chain software are the front conditions for the security of the software supply chain, and it is a necessary means to help users and enterprises choose reliable softwares. At the same time, identifying the supply chain of the entire ecology is a vital way to explore the ecological characteristics and find hidden dangers. By tracing the development history of external dependencies in different programming language management, this article summarizes the four common external dependencies management methods today and proposes a universal open source software supply chain construction algorithm. Finally, the Linux distribution version is used as a case of large software systems, and its supply chain is analyzed.