Abstract:Open collaborative development is an important software development model that has been widely applied in the development of intelligent foundational software. However, this model presents significant risks in terms of software supply chain security. On the one hand, the revenue distribution process in collaborative development may be subject to manipulation and tampering. On the other hand, code assets, even after being legitimately obtained by users, may still be illegally resold or leaked. To address these issues, this study proposes a trusted management platform for open collaborative development supply chains that uses blockchain to support trusted execution and traceability, ensuring process verifiability and enhanced security. The platform introduces contribution points to quantify users’ contributions in collaborative development and fairly allocates project revenue through smart contracts based on the value of the contribution points. Furthermore, a deposit and credit score security mechanism based on smart contracts is implemented, effectively reducing the risks of software information leakage and malicious behavior in the collaborative development process. Experimental results show that the proposed platform effectively protects developers’ rights and interests, significantly enhances developer motivation and responsiveness, and maintains reasonable overhead, thus providing strong support for software supply chain security.