Project Pyrsia: Securing the OSS Supply Chain