Measuring the supply chain risk and vulnerability in frequency space