Obtain libraries, modules, middleware and frameworks that are well secured, only from suppliers (commercial, open source or other) whose identity has been verified, and keep them maintained.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.