Mapping the Software Supply Chain Security Landscape: A Full Corpus Synthesis

The software industry is confronting a critical crisis driven by systemic vulnerabilities within the software supply chain and the ubiquitous reliance on third-party dependencies. While individual exploits and localized compliance frameworks have been heavily studied, this highly fragmented academic discourse creates a critical barrier to organizational readiness and proactive incident preparedness. To address this gap and enhance digital resilience, this study maps the conceptual, knowlegde and structural landscape of software supply chain literature using Synthetic Knowledge Synthesis. Analyzing publications from 2021 to 2026, the research reveals an exponential growth in output, heavily dominated by conference proceedings and driven primarily by institutional and state-funded efforts in the United States and China. Thematic mapping identifies five core clusters defining the current ecosystem: Software Composition Analysis, Advanced Vulnerability Detection, AI-Driven Threat Intelligence, Deep Learning, and DevSecOps. The study highlights critical unresolved gaps, notably the prevalence of false positives in static Software Bill of Materials tools due to a lack of execution context, and a pronounced disconnect between theoretical models and practical enterprise application. Future research directions emphasize the integration of Large Language Models for automated patch generation, the development of execution-aware vulnerability triage, and the evolution of dynamic, AI-driven artifacts to secure complex dependency networks.