Aqua Software Supply Chain Security vs npq (2026)