Securing the Software Supply Chain: Recommended Practices Guide for Developers