Software Supply Chain Security vs. SCA: What’s the Difference?