Understanding security challenges in the software supply chain through causal relationships - Aylin Adem; Erman Çakıt; Metin Dağdeviren; Beata Mrugalska; Waldemar Karwowski (PLoS ONE, 2026)