loongson/pypi: links for supplychainanalysis