Preventing open-source supply chain risks with intelligent agents