Supply chain vulnerabilities are becoming a major issue, therefore understanding the components that are used within applications and system, allows organisations to do a better job of reducing their technical debts. Having the right controls in place such as conducting regular vulnerability and web application scanning and also having a mature application development lifecycle, enables organisations to better mitigate such risk.