software supply chain security framework

 in-toto provides tools both for software developers to authenticate operations
 in the supply chain, as well as for end-users to verify the authentication
 trail when installing a software product.
 .
 in-toto is developed at the Secure Systems Lab of NYU.