Securing the software supply chain is paramount in today's interconnected world. A comprehensive understanding of its flaws and robust measures are essential to mitigate risks posed by malicious actors. ASsS, a framework designed for analyzing the security posture of software supply chains, provides valuable insights into potential threats and reco