Thanks to the Solarwinds fiasco, we now see the importance of knowing what’s really in your software supply chain. Tidelift is doing just that for open-source projects with its Tidelift catalogs.