How to Strengthen Your Software Supply Chain Security, Improve Best Practices, and Build Trust in Your Projects