Dirty-waters automatically finds software supply chain issues in software projects by analyzing the available metadata of all dependencies, transitively. Reference: Dirty-Waters: Detecting Software ...