In secure software design and development, what is meant by software supply chain security?

A. using unknown packages without review B. downloading binaries from untrusted sites C. ignoring dependency updates D. protecting third-party components, build systems and dependencies