In the past I've worked on a set of scripts to identify potential for improvement of the supply chain within our build service. For now RPM files can be scanned for unused signature files that are available upstream and look for potentially unused https:// links, although they are available.

These scripts work on a prototype-basis, but there is a lot of follow-up work to do, e.g.:

• Re-structuring and tidying up the source
• Improve the API of the libraries
• Implement advanced features (look through all of the existing # TODO comments)
• Add test cases to make scripts and libraries more robust
• Move from GitHub to internal GitLab instance
• Implement robust continuous integration
• Create script that will scan through the (Factory) source tree on a regular basis