Open Source Supply Chain Risk: MCP Server Guide | VaultPlane