AI and software supply chain