Modern software is assembled more than it is written. A typical application pulls in hundreds of open-source packages, container images, build tools, CI services and cloud components, and each one…