Cross-linking to the ISO open standard for creating Software Bill Of Materials to help analyse the software supply chain. When implementing this idea especially the existing open source tools should be looked at.