How to... Understand the Software Supply Chain (Part 1)