Supply chain security for ML