Tagged software-supply-chain