Tidelift CEO Donald Fischer and Sonatype CTO Brian Fox dive into the challenges maintainers of open source software face when it comes to securing software supply chains and what enterprise IT organizations can help do about them.