Tidelift CEO Donald Fischer explains how organizations are actually going about ensuring the security of software supply chains made up of open source software components.