[rwth-security] Chain-bench - open-source tool for auditing software supply chain