Software Composition Analysis and Supply Chain Security in Apache Projects: an Empirical Study | Publicación