The Practical Dev's review of Supply Chain Attacks and Secure Software Updates