While open source software is the bedrock of modern software development, it is also the weakest link in the software supply chain, according to a report by Endor Labs.