Downloadable software for assessing and managing cybersecurity risks across the software supply chain; non-downloadable software for assessing and managing open-source vulnerabilities