supply chain vulnerability in web development