Software Composition Analysis and Supply Chain Security in Apache Projects: an Empirical Study - Nocera, S; Vegas, S; Scanniello, G; Juristo, N (2025 Ieee/Acm 22nd International Conference On Mining Software Repositories, Msr, 2025)