Reducing Software Supply Chain Risk Utilizing Java Production Data