Recorded computer software for the assessment of the security of third-party components across the supply chain