go-pillage-registries vs Software Supply Chain Security Platform (2026)