The supply chain formed by tens of thousands of interdependent open-source software libraries has brought convenience to software development while also posing unprecedented challenges in dependency management. The exponential growth in the scale of software libraries and their intricate dependency relationships has led to a significant increase in the complexity of the supply chain. On the one hand, defects with any software library in the supply chain can potentially impact other libraries in the chain, amplifying the magnitude of losses. On the other hand, any software library can be affected by problems originating from other libraries in the supply chain, making issue identification and resolution difficult. In this backdrop, many researchers focused on characterizing, abstracting, and analyzing the dependency relationships among software libraries and exploring the evolutionary behaviors of open-source software ecosystems based on the library dependency models.