How to Mitigate Risks Caused by Supply Chain Software