Digital Supply Chains: towards a Framework for Software Distribution