View my paper on a Java based Supply Chain Integrity Verifier (SCIV)